Devo vs Seceon Open Threat Management Platform comparison

Why PeerSpot?

Devo and Seceon are both solutions in the Security Information and Event Management (SIEM) category. Devo is ranked #17 with an average rating of 8.2, while Seceon is ranked #41 with an average rating of 6.0. Devo holds a 1.2% mindshare in SIEM, compared to Seceon’s 0.8% mindshare. Additionally, 92% of Devo users are willing to recommend the solution, compared to 90% of Seceon users who would recommend it.

Devo

Read 27 Devo reviews

7,610 Views
4,109 Comparison Views

92% willing to recommend

Seceon Open Threat Manageme...

Read 13 Seceon Open Threat Management Platform reviews

2,998 Views
2,848 Comparison Views

90% willing to recommend

Devo

Seceon Open Threat Manageme...

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 18, 2024

Both Devo and Seceon Open Threat Management Platform offer robust solutions in threat management. Seceon seems to have the upper hand thanks to its automation, cost-effectiveness, and smooth deployment.

Features: Devo is praised for real-time data analytics, scalability, and advanced threat detection. Seceon Open Threat Management Platform is commended for comprehensive threat management, ease of use, and automation capabilities.

Room for Improvement: Users suggest Devo enhance its integration capabilities, lower resource consumption, and improve user interface. Seceon users request better documentation, more frequent updates, and enhanced reporting tools.

Ease of Deployment and Customer Service: Devo users find the deployment straightforward but note occasional support complexities. Seceon is known for smooth deployment and responsive customer service.

Pricing and ROI: Devo's setup costs are high but offer long-term ROI through enhanced security. Seceon provides a more cost-effective initial setup and strong ROI for comprehensive threat management features.

To learn more, read our detailed Devo vs. Seceon Open Threat Management Platform Report (Updated: September 2026).

Buyer's Guide

Devo vs. Seceon Open Threat Management Platform

September 2026

Download the complete report

Helped 914,262 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Devo

Ranking in Security Information and Event Management (SIEM)

17th

Average Rating

8.4

Reviews Sentiment

6.6

Number of Reviews

Ranking in other categories

Log Management (17th), IT Operations Analytics (7th), AIOps (16th)

Seceon Open Threat Manageme...

Ranking in Security Information and Event Management (SIEM)

41st

Average Rating

7.8

Reviews Sentiment

7.5

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of September 2026, in the Security Information and Event Management (SIEM) category, the mindshare of Devo is 1.2%, up from 1.2% compared to the previous year. The mindshare of Seceon Open Threat Management Platform is 0.8%, down from 0.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Security Information and Event Management (SIEM) Mindshare Distribution
Product	Mindshare (%)
Devo	1.2%
Seceon Open Threat Management Platform	0.8%
Other	98.0%

Security Information and Event Management (SIEM)

Featured Reviews

Usama Khan

Team Lead Soc at a tech services company with 51-200 employees

Advanced threat hunting has improved SOC visibility and now supports faster incident response

Devo can improve in how its connectors enhance integration with third-party tools. Devo's architecture works by having you deploy a relay server in the data center of the client side and Devo SIEM is basically on the AWS cloud. There are specific ports which are enabled on the relay server, which are 514 and 13000, 13151, 152. However, when we talk about databases and custom integrations, there are not default ports in the relay server. No default ports are defined. For JDBC drivers, the port number is 1433, but it is not in the relay server. You have to add it manually. For Oracle RDBMS, the port is 1521, and it is also not there by default. I would appreciate more third-party integrations including Fortinet and others. Machine learning models can also be improved. Playbooks in the SOAR can also be improved. Regarding playbooks for automation, we utilize playbooks for automation in SOAR for automated IOC blocking on a firewall, on a web application firewall, on DNS security, etc. The only option for us to run the playbook is to schedule the job for it. However, if I want to manually run the playbook, there is no option for doing so. This needs improvement.

Read full review

TamimKhan

Solution Architect at Tiger IT Bangladesh Limited

Customization options need improvement but valuable threat management features and reasonable pricing benefit service providers

We are a Managed Security Service Provider (MSSP), and we provide services to our customers Seceon Open Threat Management Platform offers valuable features such as XDR and EDR. I also find the SOC and SOAR features valuable. Log management is another key functionality of the product. There are…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The drill-down reports capabilities allow analysts to click on any element in a widget. When they see a spike in a line chart for a failed login, which could be a true or false attempt, they can click that spike, and a table widget on the same active board instantly populates with raw logs of data for those specific failed logins."

"The user experience [is] well thought out and the workflows are logical. The dashboards are intuitive and highly customizable."

"We can ingest virtually any log source, which is much better than our previous solution."

"The real-time analytics of security-related data are super. There are a lot of data feeds going into it and it's very quick at pulling up and correlating the data and showing you what's going on in your infrastructure. It's fast. The way that their architecture and technology works, they've really focused on the speed of query results and making sure that we can do what we need to do quickly. Devo is pulling back information in a fast fashion, based on real-time events."

"The ROI has been great as we could launch it in a few months instead of a couple of years, and when you put all the costs together, it is less to have done it than with the open source approach."

"I'm so happy with the platform."

"More than anything, we have seen ROI in the amount of time saved during investigations."

"The user interface is really modern. As an end-user, there are a lot of possibilities to tailor the platform to your needs, and that can be done without needing much support from Devo. It's really flexible and modular. The UI is very clean."

More Devo pros

"The solution is stable."

"We only recently started using Seceon, so we aren't taking advantage of all its features yet. We have enabled some proactive alerts about utilization and bottlenecks from high traffic."

"The solution is very cost-effective compared to Splunk and LogRhythm."

"The algorithm used in Seceon OTM is clear and logical, categorizing events as needed. This helps us identify and respond to threats effectively."

"The main thing is the value proposition. It is one of the most sophisticated yet affordable solutions that I've come across. It is also one of the easiest-to-manage yet comprehensive solutions for a SOC analyst. Its customizations are really good, and it has a lot of integrations. It is multi-tenant and very fast to onboard. Its stability is 100%. We've never had an outage with it. It doesn't require extensive hardware resources. Its level of support is also very good. They have a very responsive technical team."

"The most valuable feature of this solution is its artificial intelligence."

"You can use different solutions in a single platform which is very easy and attractive for customers."

"If we compare the solution with other SIEM solutions that are also turning to artificial intelligence, this will be the number one choice."

More Seceon Open Threat Management Platform pros

Cons

"Devo has a lot of cloud connectors, but they need to do a little bit of work there."

"From our experience, the Devo agent needs some work. They built it on top of OS Query's open-source framework. It seems like it wasn't tuned properly to handle a large volume of Windows event logs. In our experience, there would definitely be some room for improvement. A lot of SIEMs on the market have their own agent infrastructure. I think Devo's working towards that, but I think that it needs some improvement as far as keeping up with high-volume environments."

"An admin who is trying to audit user activity usually cannot go beyond a day in the UI. I would like to have access to pages and pages of that data, going back as far as the storage we have, so I could look at every command or search or deletion or anything that a user has run. As an admin, that would really help. Going back just a day in the UI is not going to help, and that means I have to find a different way to do that."

"The Activeboards feature is not as mature regarding the look and feel."

"However, the incident and threat detection is not what we had hoped for."

"The biggest area with room for improvement in Devo is the Security Operations module that just isn't there yet."

"Technical support needs to be more direct. For example, when we submit a ticket, the support team will delegate a task to the operations team, for example, or various other teams."

"There are some issues from an availability and functionality standpoint, meaning the tool is somewhat slow. There were some slow response periods over the past six to nine months, though it has yet to impact us terribly as we are a relatively small shop. We've noticed it, however, so Devo could improve the responsiveness."

More Devo cons

"The SOP they provided wasn't great. They offered training over Sherp Virtualization, and the Seceon leadership visited our location to explain everything in detail, but the documentation and training could be better. It isn't as effective as it could be. There's some room for improvement there."

"The dashboard has always been an issue."

"Seceon Open Threat Management Platform sells some add-ons as part of the whole suite but not individually. If they sold them individually, they could potentially attract more business."

"It would be ideal with the processing was more manageable. Not many customers are willing to have a dedicated server with two CPUs and one TB of memory. The cost of this is huge for a smaller organization."

"It is a standalone solution now. They need to make it into a cloud-based subscription model. It needs more compatibility for co-managed solutions. It can also have more threats and deeper integration with Microsoft."

"It needs more compatibility for co-managed solutions."

"The product should improve the triggering rate."

"For small to medium-sized customers, Seceon Open Threat Management Platform is good. However, for large enterprises, it is not as effective."

More Seceon Open Threat Management Platform cons

Pricing and Cost Advice

"Pricing is based on the number of gigabytes of ingestion by volume, and it's on a 30-day average. If you go over one day, that's not a big deal as long as the average is what you expected it to be."

"Devo is a hosted or subscription-based solution, whereas before, we purchased QRadar, so we owned it and just had to pay a maintenance fee. We've encountered this with some other products, too, where we went over to subscription-based. Our thought process is that with subscription based, the provider hosts and maintains the tool, and it's offsite. That comes with some additional fees, but we were able to convince our upper management it was worth the price. We used to pay under 10k a year for maintenance, and now we're paying ten times that. It was a relatively tough sell to our management, but I wonder if we have a choice anymore; this is where the market is."

"Our licensing fees are billed annually and per terabyte."

"It's a per gigabyte cost for ingestion of data. For every gigabyte that you ingest, it's whatever you negotiated your price for. Compared to other contracts that we've had for cloud providers, it's significantly less."

"Devo was very cost-competitive... Devo did come with that 400 days of hot data, and that was not the case with other products."

"I'm not involved in the financial aspect, but I think the licensing costs are similar to other solutions. If all the solutions have a similar cost, Devo provides more for the money."

"The way Devo prices things is based on the amount of data, and I wish the tiers had more granularity. Maybe at this point they do, but when we first negotiated with them, there were only three or four tiers."

"We have an OEM agreement with Devo. It is very similar to the standard licensing agreement because we are charged in the same way as any other customer, e.g., we use the backroom."

More Devo pricing and cost advice

"We used the solution's trial version for two months and later purchased it."

"I find Seceon OTM's pricing to be reasonable, not too high or low, just okay for the market standards. I can't disclose specific figures, we pay on a quarterly basis under a service model. I would rate it eight out of ten. As a customer, I always hope for better pricing options."

"It has a per-asset model instead of an ingestion-based model, which gives predictable pricing. In terms of price, it is in the middle to lower range of SIEMs that it competes against. It is the most affordable solution that we have implemented so far. It was much more affordable than anything else I've implemented."

"Seceon Open Threat Management Platform is cost-effective because it's a comprehensive platform that offers high availability."

"The solution is cheap and very competitive. It offers good tuning in terms of the pricing. Other solutions like Palo Alto and IBM are more expensive."

"The pricing is very competitive. It's not expensive."

"The price is quite reasonable."

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

914,262 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

13%

Outsourcing Company

11%

Construction Company

10%

Manufacturing Company

Outsourcing Company

12%

Manufacturing Company

11%

Computer Software Company

Financial Services Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	10
Midsize Enterprise	6
Large Enterprise	12

By reviewers
Company Size	Count
Small Business	9
Midsize Enterprise	5
Large Enterprise	1

Questions from the Community

What is your experience regarding pricing and costs for Devo?

The price is considered okay.

See all answers

What needs improvement with Devo?

Perhaps Devo could add some features in the future on the network part. Specifically, I think they could improve network traffic analysis capabilities.

See all answers

What is your primary use case for Devo?

I have been using Devo as a partner and system integrator for three years. For log monitoring, the clients' use cases can utilize Devo perfectly. Compliance and security operation monitoring are th...

See all answers

What is your experience regarding pricing and costs for Seceon Open Threat Management Platform?

The pricing of Seceon Open Threat Management Platform is very reasonable.

See all answers

What needs improvement with Seceon Open Threat Management Platform?

There are areas for improvement in the customization options. Every ( /products/every-reviews ) quarter, they are developing the platform with new updates based on feedback provided.

See all answers

What is your primary use case for Seceon Open Threat Management Platform?

We are a Managed Security Service Provider (MSSP ( /categories/managed-security-services-providers-mssp )), and we provide services to our customers.

See all answers

Comparisons

Splunk Enterprise Security vs Devo

Compared 8% of the time

LogRhythm SIEM vs Devo

Compared 6% of the time

New Relic vs Devo

Compared 4% of the time

Datadog vs Devo

Compared 3% of the time

IBM Security QRadar vs Devo

Compared 2% of the time

More Devo Competitors

Microsoft Sentinel vs Seceon Open Threat Management Platform

Compared 14% of the time

IBM Security QRadar vs Seceon Open Threat Management Platform

Compared 12% of the time

DNIF HYPERCLOUD vs Seceon Open Threat Management Platform

Compared 6% of the time

Splunk Enterprise Security vs Seceon Open Threat Management Platform

Compared 5% of the time

LogRhythm SIEM vs Seceon Open Threat Management Platform

Compared 5% of the time

More Seceon Open Threat Management Platform Competitors

Product Reports

Buyer's Guide

Devo

September 2026

Download Devo product report

Buyer's Guide

Seceon Open Threat Management Platform

August 2026

Seceon Open Threat Management Platform report

Download Seceon Open Threat Management Platform product report

Also Known As

No data available

Seceon OTM, Seceon aiSIEM, aiSIEM, Seceon Open Threat Management

Overview

Devo offers powerful visual analytics, real-time data querying, and log integration capabilities within a cloud-native, multi-tenant architecture, supporting extended data retention ideal for long-term analysis and compliance.

Devo is recognized for its Activeboards, which facilitate visual analytics. High-speed search capabilities and real-time analytics enable efficient data manipulation and querying. Its multi-tenant architecture supports effective data segregation and customization tailored to distinct business needs, enhancing its value for handling complex log integrations. With extended data retention of 400 days and a cloud-native architecture, Devo is a robust platform for long-term analysis and compliance requirements. Though opportunities exist to improve browser stability on large searches, SOAR integrations, and its parser capabilities, Devo remains essential for incident response and security monitoring, offering centralized data storage and analysis.

What are Devo's most important features?

Activeboards: Facilitate visual analytics and data exploration.
High-Speed Search: Enables fast data querying and manipulation.
Real-Time Analytics: Supports instant insights and decision-making.
Multi-Tenant Architecture: Allows effective data segregation and customization.
Extended Data Retention: Offers 400-day log retention for compliance and analysis.
Complex Log Integration: Handles intricate data sources effortlessly.

What benefits and ROI should organizations look for in reviews?

Visual Insights: Enhance understanding through interactive dashboards.
Performance Efficiency: Saves time with high-speed data search and real-time results.
Customization Flexibility: Fits specific business requirements with multi-tenant architecture.
Long-Term Compliance: Ensures alignment with extended data retention needs.
Centralized Monitoring: Enables comprehensive incident response and security monitoring.

Devo is extensively used in industries focused on incident response and digital forensics, centralizing data for security monitoring across hybrid environments. Organizations benefit from its ability to store and analyze aggregated logs, creating alerts and dashboards to enhance visibility for network and endpoint activities in multi-domain settings.

Devo

Seceon Open Threat Management Platform offers a blend of cost-effectiveness and ease of use, featuring AI, real-time remediation, and endpoint detection, suitable for sectors like finance and healthcare.

Combining AI-driven analysis with real-time threat remediation, Seceon Open Threat Management Platform provides comprehensive security management. Users value its stability and the absence of hardware requirements. Its features, including XDR/EDR and SOC/SOAR, focus on improving response times and lowering costs. The platform's integration capabilities and genuine alert customization enhance its effectiveness. Designed with businesses in mind, it requires no coding for its pre-built features, streamlining processes like threat hunting and incident monitoring through a single license. However, cloud model development and enhanced training are needed, and it entails high costs for smaller enterprises.

What are the most important features?

Artificial Intelligence: Improves threat detection accuracy.
Real-Time Remediation: Automates threat response actions.
Behavior Analytics: Identifies abnormal activities efficiently.
Endpoint Detection: Guards against endpoint vulnerabilities.
Integration Capabilities: Connects with a range of security tools.

What benefits or ROI should users look for?

Cost Reduction: Lowers operational expenses via AI automation.
Quick Onboarding: Accelerated deployment process.
Improved Response Time: Faster threat mitigation.
Minimized Hardware Needs: Decreases infrastructure costs.

Banks and managed security service providers deploy Seceon Open Threat Management Platform to centralize threat management and analysis. In healthcare and finance, it streamlines SIEM management and ensures compliance, leveraging its AI capabilities to provide efficient endpoint protection and enhance security operations. Despite needing better global coverage and management enhancements, it helps manage security events quickly and effectively.

Seceon

Sample Customers

United States Air Force, Rubrik, SentinelOne, Critical Start, NHL, Panda Security, Telefonica, CaixaBank, OpenText, IGT, OneMain Financial, SurveyMonkey, FanDuel, H&R Block, Ulta Beauty, Manulife, Moneylion, Chime Bank, Magna International, American Express Global Business Travel

Caduceus, SUNY

Buyer's Guide

Devo vs. Seceon Open Threat Management Platform

September 2026

Free Report: Devo vs. Seceon Open Threat Management Platform

Find out what your peers are saying about Devo vs. Seceon Open Threat Management Platform and other solutions. Updated: September 2026.

DOWNLOAD NOW

914,262 professionals have used our research since 2012.

See our Devo vs. Seceon Open Threat Management Platform report.

See our list of best Security Information and Event Management (SIEM) vendors.

We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.