Devo vs Rapid7 InsightOps comparison

Devo and Rapid7 are both solutions in the Log Management category. Devo is ranked #28 with an average rating of 8.0, while Rapid7 is ranked #27 with an average rating of 9.0. Devo holds a 0.8% mindshare in Log Management, compared to Rapid7’s 0.6% mindshare. Additionally, 95% of Devo users are willing to recommend the solution, compared to 100% of Rapid7 users who would recommend it.

Devo

Read 23 Devo reviews

2,909 Views
1,484 Comparison Views

95% willing to recommend

Rapid7 InsightOps

Read 10 Rapid7 InsightOps reviews

890 Views
837 Comparison Views

100% willing to recommend

Devo

Rapid7 InsightOps

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 9, 2024

Rapid7 InsightOps and Devo compete in the log management and SIEM solutions category. Devo seems to have the upper hand due to its superior feature richness, which balances its higher pricing.

Features: Rapid7 InsightOps provides detailed security analytics, seamless integration options, and user-friendly interfaces. Devo offers real-time big data processing, a scalable architecture, and a comprehensive feature set that users prefer for its advanced capabilities.

Room for Improvement: Rapid7 InsightOps needs to enhance reporting capabilities, performance optimization, and expand its customization options. Devo could improve its intuitive configuration settings, alerting functions, and make minor user interface refinements. Feedback indicates Rapid7 requires more urgent development areas.

Ease of Deployment and Customer Service: Rapid7 InsightOps is noted for an intuitive setup process and reliable customer service, facilitating easier deployment. Devo requires more initial effort due to extensive features but benefits from robust support resources, assisting users with complex configurations.

Pricing and ROI: Rapid7 InsightOps is viewed as having a competitive pricing model with a quick ROI thanks to seamless integration. Devo's higher pricing is justified by the extensive feature set, offering significant long-term ROI. InsightOps is considered immediately cost-effective while Devo's broader benefits manifest over time.

To learn more, read our detailed Devo vs. Rapid7 InsightOps Report (Updated: December 2025).

Buyer's Guide

Devo vs. Rapid7 InsightOps

December 2025

Download the complete report

Helped 881,114 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Devo

Ranking in Log Management

28th

Average Rating

8.4

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Security Information and Event Management (SIEM) (24th), IT Operations Analytics (11th), AIOps (20th)

Rapid7 InsightOps

Ranking in Log Management

27th

Average Rating

9.0

Reviews Sentiment

6.0

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of January 2026, in the Log Management category, the mindshare of Devo is 0.8%, up from 0.6% compared to the previous year. The mindshare of Rapid7 InsightOps is 0.6%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Log Management Market Share Distribution
Product	Market Share (%)
Rapid7 InsightOps	0.6%
Devo	0.8%
Other	98.6%

Log Management

Featured Reviews

Francisco JavierRomo

Strategic Account Executive at a computer software company with 51-200 employees

Has improved investigative workflows with interactive dashboards and simplified data correlation

The data analytics cloud component focuses on real-time analytics, which is very impressive. The SIEM collects and correlates logs data from different sources and can integrate with ServiceNow, hardware asset management, and software asset management. The security orchestration, automation, and response (SOAR) is another valuable feature. The security data platform serves as the foundation of Devo. Regarding advanced query capabilities, Devo offers several models including query logs, visual query builder, language integrated query, and SQL, with SQL being the most frequently used querying data capability. The single pane of glass that Devo offers is the SOC. The tools in Devo's active ports are for investigating, not just viewing data. They are more interactive than other market solutions. The drill-down reports capabilities allow analysts to click on any element in a widget. When they see a spike in a line chart for a failed login, which could be a true or false attempt, they can click that spike, and a table widget on the same active board instantly populates with raw logs of data for those specific failed logins. This is particularly important for enterprise companies with numerous endpoints and users. The dynamic filtering of inputs significantly reduces the time cybersecurity analysts spend trying to figure out failed logins and identifying false positives.

Read full review

reviewer1247523

Head of Sales Services Department at a comms service provider with 51-200 employees

Customization and automation streamline workflows for seamless operations

The features of Rapid7 InsightOps that I have found most valuable are the predefined policies and the use of correlation rules, which are very valuable because they eliminate the need to spend time creating those rules. This feature detects insider threats or compromised credentials by using user behavior analytics, which can collect other compromise indicators. It makes it easier to install and implement this solution because you can run it as normal behavior of users and then switch off to look for the anomalous behavior of any entities, such as laptops and others. In any violation or restricted behavior, the system will notify you that something unusual is occurring. The machine learning algorithms in Rapid7 InsightIDR for threat detection work quite effectively as part of the user entity behavior analytic model, allowing us to focus group normal typical behavior of users and then turn on the rule to spot any unexpected behavior. The automation features of Rapid7 InsightOps are quite satisfactory, as users appreciate these features, especially when integrating with the ticketing system. If something goes wrong, InsightOps will notify the ticketing system to create a ticket and assign it to the responsible person to handle the events found in the infrastructure. The customizable dashboards in Rapid7 InsightOps are quite valuable and interesting because SOC center operators spend most of their time investigating on those dashboards, making them easy to manage. Additionally, we can configure email reports for high-level talks, sending historical data without needing to look online, which is very convenient.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Devo has a really good website for creating custom configurations."

"Scalability is one of Devo's strengths."

"The thing that Devo does better than other solutions is to give me the ability to write queries that look at multiple data sources and run fast. Most SIEMs don't do that. And I can do that by creating entity-based queries. Let's say I have a table which has Okta, a table which has G Suite, a table which has endpoint telemetry, and I have a table which has DNS telemetry. I can write a query that says, 'Join all these things together on IP, and where the IP matches in all these tables, return to me that subset of data, within these time windows.' I can break it down that way."

"Devo provides a multi-tenant, cloud-native architecture. This is critical for managed service provider environments or multinational organizations who may have subsidiaries globally. It gives organizations a way to consolidate their data in a single accessible location, yet keep the data separate. This allows for global views and/or isolated views restricted by access controls by company or business unit."

"The ability to have high performance, high-speed search capability is incredibly important for us. When it comes to doing security analysis, you don't want to be doing is sitting around waiting to get data back while an attacker is sitting on a network, actively attacking it. You need to be able to answer questions quickly. If I see an indicator of attack, I need to be able to rapidly pivot and find data, then analyze it and find more data to answer more questions. You need to be able to do that quickly. If I'm sitting around just waiting to get my first response, then it ends up moving too slow to keep up with the attacker. Devo's speed and performance allows us to query in real-time and keep up with what is actually happening on the network, then respond effectively to events."

"The real-time analytics of security-related data are super. There are a lot of data feeds going into it and it's very quick at pulling up and correlating the data and showing you what's going on in your infrastructure. It's fast. The way that their architecture and technology works, they've really focused on the speed of query results and making sure that we can do what we need to do quickly. Devo is pulling back information in a fast fashion, based on real-time events."

"Being able to build and modify dashboards on the fly with Activeboards streamlines my analyst time because my analysts aren't doing it across spreadsheets or five different tools to try to build a timeline out themselves. They can just ingest it all, build a timeline out across all the logging, and all the different information sources in one dashboard. So, it's a huge time saver. It also has the accuracy of being able to look at all those data sources in one view. The log analysis, which would take 40 hours, we can probably get through it in about five to eight hours using Devo."

"The most valuable feature is that it has native MSSP capabilities and maintains perfect data separation. It does all of that in a very easy-to-manage cloud-based solution."

More Devo pros

"It has the ability to alert and track logs from different sources."

"We can save logs as plain text."

"The ability to browse logs from multiple sources at the same time really speeds up root cause analysis."

"Integration of InsightOps with other tools, especially SIEM solutions, has generally improved operational efficiency."

"The most valuable feature of Rapid7 InsightOps is the search functionality."

"The machine learning algorithms in Rapid7 InsightIDR for threat detection work quite effectively as part of the user entity behavior analytic model, allowing us to focus group normal typical behavior of users and then turn on the rule to spot any unexpected behavior."

Cons

"Devo has a lot of cloud connectors, but they need to do a little bit of work there. They've got good integrations with the public cloud, but there are a lot of cloud SaaS systems that they still need to work with on integrations, such as Salesforce and other SaaS providers where we need to get access logs."

"I would like to have the ability to create more complex dashboards."

"They can improve their AI capabilities"

"Technical support could be better."

"Some third-parties don't have specific API connectors built, so we had to work with Devo to get the logs and parse the data using custom parsers, rather than an out-of-the-box solution."

"From our experience, the Devo agent needs some work. They built it on top of OS Query's open-source framework. It seems like it wasn't tuned properly to handle a large volume of Windows event logs. In our experience, there would definitely be some room for improvement. A lot of SIEMs on the market have their own agent infrastructure. I think Devo's working towards that, but I think that it needs some improvement as far as keeping up with high-volume environments."

"The biggest area with room for improvement in Devo is the Security Operations module that just isn't there yet. That goes back to building out how they're going to do content and larger correlation and aggregation of data across multiple things, as well as natively ingesting CTI to create rule sets."

"Their documentation could be better. They are growing quickly and need to have someone focused on tech writing to ensure that all the different updates, how to use them, and all the new features and functionality are properly documented."

More Devo cons

"Since I used the beta, improvements are to be expected. The dashboard options could have been clearer, but I believe it is more a problem with the limited documentation available at the time."

"The solution takes a little bit of time when we load the website for the first time."

"Improvement is needed in the dashboard of InsightOps, especially for less technical users."

"Rapid7 InsightOps could improve by making the search query better. There are times when the search query is broken and it does not find anything."

"There are a few things I would like to do with a few more complex queries which I am not able to do right now, because it is a SaaS solution."

Pricing and Cost Advice

"Pricing is based on the number of gigabytes of ingestion by volume, and it's on a 30-day average. If you go over one day, that's not a big deal as long as the average is what you expected it to be."

"The way Devo prices things is based on the amount of data, and I wish the tiers had more granularity. Maybe at this point they do, but when we first negotiated with them, there were only three or four tiers."

"I like the pricing very much. They keep it simple. It is a single price based on data ingested, and they do it on an average. If you get a spike of data that flows in, they will not stick it to you or charge you for that. They are very fair about that."

"Be cautious of metadata inclusion for log types in pricing, as there are some "gotchas" with that."

"It's a per gigabyte cost for ingestion of data. For every gigabyte that you ingest, it's whatever you negotiated your price for. Compared to other contracts that we've had for cloud providers, it's significantly less."

"[Devo was] in the ballpark with at least a couple of the other front-runners that we were looking at. Devo is a good value and, given the quality of the product, I would expect to pay more."

"Devo is definitely cheaper than Splunk. There's no doubt about that. The value from Devo is good. It's definitely more valuable to me than QRadar or LogRhythm or any of the old, traditional SIEMs."

"Our licensing fees are billed annually and per terabyte."

More Devo pricing and cost advice

"The product is cheap."

See which vendors are best for you

Use our free recommendation engine to learn which Log Management solutions are best for your needs.

See recommendations

881,114 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

16%

University

Computer Software Company

Manufacturing Company

Computer Software Company

11%

Manufacturing Company

10%

Construction Company

Media Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	8
Midsize Enterprise	4
Large Enterprise	11

By reviewers
Company Size	Count
Small Business	7
Midsize Enterprise	2
Large Enterprise	3

Questions from the Community

What is your experience regarding pricing and costs for Devo?

Compared to Splunk or SentinelOne, it is really expensive. I rate the product’s pricing a nine out of ten, where one is cheap and ten is expensive.

See all answers

What needs improvement with Devo?

The single pane of glass that Devo offers could be improved. The tools in Devo's active ports need enhancement in their investigative capabilities. The drill-down reports capabilities, while useful...

See all answers

What is your primary use case for Devo?

During my time at MetaBase Q and as a partner integrator of ServiceNow, I had the chance to understand and be part of projects integrating SOCs, NOCs, and Security Operation Centers with Devo. Most...

See all answers

What do you like most about Rapid7 InsightOps?

Integration of InsightOps with other tools, especially SIEM solutions, has generally improved operational efficiency.

See all answers

What needs improvement with Rapid7 InsightOps?

In my opinion, there are no specific areas of Rapid7 InsightIDR that need improvement because all solutions in the SIEM market, including InsightOps and its competitors, are doing the same things b...

See all answers

What is your primary use case for Rapid7 InsightOps?

The usual use cases for Rapid7 InsightOps that I work with are to meet standard requirements such as PCI DSS and ISO standards, collecting data and protecting event logs. Rapid7 InsightOps plays a ...

See all answers

Comparisons

LogRhythm SIEM vs Devo

Compared 10% of the time

Splunk Enterprise Security vs Devo

Compared 8% of the time

IBM Security QRadar vs Devo

Compared 7% of the time

Microsoft Sentinel vs Devo

Compared 6% of the time

Elastic Security vs Devo

Compared 4% of the time

More Devo Competitors

Wazuh vs Rapid7 InsightOps

Compared 13% of the time

IBM Security QRadar vs Rapid7 InsightOps

Compared 10% of the time

Splunk Enterprise Security vs Rapid7 InsightOps

Compared 9% of the time

Datadog vs Rapid7 InsightOps

Compared 9% of the time

Fortinet FortiAnalyzer vs Rapid7 InsightOps

Compared 9% of the time

More Rapid7 InsightOps Competitors

Product Reports

Buyer's Guide

Devo

January 2026

Download Devo product report

Buyer's Guide

Rapid7 InsightOps

January 2026

Download Rapid7 InsightOps product report

Also Known As

No data available

InsightOps, Logentries

Overview

Devo is the only cloud-native logging and security analytics platform that releases the full potential of all your data to empower bold, confident action when it matters most. Only the Devo platform delivers the powerful combination of real-time visibility, high-performance analytics, scalability, multitenancy, and low TCO crucial for monitoring and securing business operations as enterprises accelerate their shift to the cloud.

Devo

Rapid7 InsightOps is the next evolution of the Logentries log management technology, combining cloud-based log centralization with IT asset search to make log management fast and easy.

As a cloud-based solution, InsightOps eliminates the need for managing and maintaining your log management technology. With a 5-minute setup, out-of-the-box analytics and visual search capabilities that eliminates the need to learn a new query language, InsightOps is the easiest log management solution available.

To start a free 30-day trial of InsightOps, visit rapid7.com/insightops

Rapid7

Sample Customers

United States Air Force, Rubrik, SentinelOne, Critical Start, NHL, Panda Security, Telefonica, CaixaBank, OpenText, IGT, OneMain Financial, SurveyMonkey, FanDuel, H&R Block, Ulta Beauty, Manulife, Moneylion, Chime Bank, Magna International, American Express Global Business Travel

Trimble Navigation Limited

Buyer's Guide

Devo vs. Rapid7 InsightOps

December 2025

Free Report: Devo vs. Rapid7 InsightOps

Find out what your peers are saying about Devo vs. Rapid7 InsightOps and other solutions. Updated: December 2025.

DOWNLOAD NOW

881,114 professionals have used our research since 2012.

See our Devo vs. Rapid7 InsightOps report.

See our list of best Log Management vendors.

We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.