Devo vs Seceon Open Threat Management Platform comparison

Devo and Seceon are both solutions in the Security Information and Event Management (SIEM) category. Devo is ranked #25 with an average rating of 8.0, while Seceon is ranked #44 with an average rating of 7.0. Devo holds a 1.1% mindshare in SIEM, compared to Seceon’s 0.8% mindshare. Additionally, 95% of Devo users are willing to recommend the solution, compared to 90% of Seceon users who would recommend it.

Devo

Read 23 Devo reviews

3,513 Views
2,108 Comparison Views

95% willing to recommend

Seceon Open Threat Manageme...

Read 13 Seceon Open Threat Management Platform reviews

1,528 Views
1,497 Comparison Views

90% willing to recommend

Devo

Seceon Open Threat Manageme...

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 18, 2024

Both Devo and Seceon Open Threat Management Platform offer robust solutions in threat management. Seceon seems to have the upper hand thanks to its automation, cost-effectiveness, and smooth deployment.

Features: Devo is praised for real-time data analytics, scalability, and advanced threat detection. Seceon Open Threat Management Platform is commended for comprehensive threat management, ease of use, and automation capabilities.

Room for Improvement: Users suggest Devo enhance its integration capabilities, lower resource consumption, and improve user interface. Seceon users request better documentation, more frequent updates, and enhanced reporting tools.

Ease of Deployment and Customer Service: Devo users find the deployment straightforward but note occasional support complexities. Seceon is known for smooth deployment and responsive customer service.

Pricing and ROI: Devo's setup costs are high but offer long-term ROI through enhanced security. Seceon provides a more cost-effective initial setup and strong ROI for comprehensive threat management features.

To learn more, read our detailed Devo vs. Seceon Open Threat Management Platform Report (Updated: March 2026).

Buyer's Guide

Devo vs. Seceon Open Threat Management Platform

March 2026

Download the complete report

Helped 885,264 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Devo

Ranking in Security Information and Event Management (SIEM)

25th

Average Rating

8.4

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Log Management (28th), IT Operations Analytics (9th), AIOps (21st)

Seceon Open Threat Manageme...

Ranking in Security Information and Event Management (SIEM)

44th

Average Rating

7.8

Reviews Sentiment

7.5

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of March 2026, in the Security Information and Event Management (SIEM) category, the mindshare of Devo is 1.1%, up from 1.0% compared to the previous year. The mindshare of Seceon Open Threat Management Platform is 0.8%, up from 0.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Security Information and Event Management (SIEM) Mindshare Distribution
Product	Mindshare (%)
Devo	1.1%
Seceon Open Threat Management Platform	0.8%
Other	98.1%

Security Information and Event Management (SIEM)

Featured Reviews

Francisco JavierRomo

Strategic Account Executive at a computer software company with 51-200 employees

Has improved investigative workflows with interactive dashboards and simplified data correlation

The data analytics cloud component focuses on real-time analytics, which is very impressive. The SIEM collects and correlates logs data from different sources and can integrate with ServiceNow, hardware asset management, and software asset management. The security orchestration, automation, and response (SOAR) is another valuable feature. The security data platform serves as the foundation of Devo. Regarding advanced query capabilities, Devo offers several models including query logs, visual query builder, language integrated query, and SQL, with SQL being the most frequently used querying data capability. The single pane of glass that Devo offers is the SOC. The tools in Devo's active ports are for investigating, not just viewing data. They are more interactive than other market solutions. The drill-down reports capabilities allow analysts to click on any element in a widget. When they see a spike in a line chart for a failed login, which could be a true or false attempt, they can click that spike, and a table widget on the same active board instantly populates with raw logs of data for those specific failed logins. This is particularly important for enterprise companies with numerous endpoints and users. The dynamic filtering of inputs significantly reduces the time cybersecurity analysts spend trying to figure out failed logins and identifying false positives.

Read full review

TamimKhan

Solution Architect at Tiger IT Bangladesh Limited

Customization options need improvement but valuable threat management features and reasonable pricing benefit service providers

We are a Managed Security Service Provider (MSSP), and we provide services to our customers Seceon Open Threat Management Platform offers valuable features such as XDR and EDR. I also find the SOC and SOAR features valuable. Log management is another key functionality of the product. There are…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The thing that Devo does better than other solutions is to give me the ability to write queries that look at multiple data sources and run fast. Most SIEMs don't do that. And I can do that by creating entity-based queries. Let's say I have a table which has Okta, a table which has G Suite, a table which has endpoint telemetry, and I have a table which has DNS telemetry. I can write a query that says, 'Join all these things together on IP, and where the IP matches in all these tables, return to me that subset of data, within these time windows.' I can break it down that way."

"The most valuable feature is definitely the ability that Devo has to ingest data. From the previous SIEM that I came from and helped my company administer, it really was the type of system where data was parsed on ingest. This meant that if you didn't build the parser efficiently or correctly, sometimes that would bring the system to its knees. You'd have a backlog of processing the logs as it was ingesting them."

"The ability to have high performance, high-speed search capability is incredibly important for us. When it comes to doing security analysis, you don't want to be doing is sitting around waiting to get data back while an attacker is sitting on a network, actively attacking it. You need to be able to answer questions quickly. If I see an indicator of attack, I need to be able to rapidly pivot and find data, then analyze it and find more data to answer more questions. You need to be able to do that quickly. If I'm sitting around just waiting to get my first response, then it ends up moving too slow to keep up with the attacker. Devo's speed and performance allows us to query in real-time and keep up with what is actually happening on the network, then respond effectively to events."

"Being able to build and modify dashboards on the fly with Activeboards streamlines my analyst time because my analysts aren't doing it across spreadsheets or five different tools to try to build a timeline out themselves. They can just ingest it all, build a timeline out across all the logging, and all the different information sources in one dashboard. So, it's a huge time saver. It also has the accuracy of being able to look at all those data sources in one view. The log analysis, which would take 40 hours, we can probably get through it in about five to eight hours using Devo."

"Because of the way Devo works, our onboarding time has shrunk by 50 percent at least."

"The user interface is really modern. As an end-user, there are a lot of possibilities to tailor the platform to your needs, and that can be done without needing much support from Devo. It's really flexible and modular. The UI is very clean."

"Devo helps us to unlock the full power of our data because they have more than 450 parsers, which means that we can ingest pretty much any type of log data."

"But from a SaaS standpoint, if not best-in-breed, Devo is certainly in the top-two or top-three."

More Devo pros

"Seceon Open Threat Management Platform notifies only genuine alerts. It offers plenty of options that are suitable for MSPs."

"The most valuable features are behaviour analytics, threat intelligence, endpoint detection, and response features."

"We only recently started using Seceon, so we aren't taking advantage of all its features yet. We have enabled some proactive alerts about utilization and bottlenecks from high traffic."

"The main thing is the value proposition. It is one of the most sophisticated yet affordable solutions that I've come across. It is also one of the easiest-to-manage yet comprehensive solutions for a SOC analyst. Its customizations are really good, and it has a lot of integrations. It is multi-tenant and very fast to onboard. Its stability is 100%. We've never had an outage with it. It doesn't require extensive hardware resources. Its level of support is also very good. They have a very responsive technical team."

"It offers a holistic approach with multiple solutions blended into one platform."

"The main thing is the value proposition; it is one of the most sophisticated yet affordable solutions that I've come across, and it is also one of the easiest-to-manage yet comprehensive solutions for a SOC analyst."

"I like that it's an AI-based platform. The most valuable feature is that it's a comprehensive solution. Most tools in the marketplace are comprised of miscellaneous items. They fail to provide real-time remediation features. However, with Seceon Open Threat Management Platform, anything you can think of in cybersecurity, like auto-remediation, real-time response, and even on-premise components, is available in a single platform. So, it's perfect for finance and healthcare who don't want to share their data with a third party like the cloud. You can have this on-premise as well. So, the expenditure will be lower as less human intervention is required."

"You can use different solutions in a single platform which is very easy and attractive for customers."

More Seceon Open Threat Management Platform pros

Cons

"The tools in Devo's active ports need enhancement in their investigative capabilities."

"Where Devo has room for improvement is the data ingestion and parsing. We tend to have to work with the Devo support team to bring on and ingest new sources of data."

"The Activeboards feature is not as mature regarding the look and feel."

"Some basic reporting mechanisms have room for improvement. Customers can do analysis by building Activeboards, Devo’s name for interactive dashboards. This capability is quite nice, but it is not a reporting engine. Devo does provide mechanisms to allow third-party tools to query data via their API, which is great. However, a lot of folks like or want a reporting engine, per se, and Devo simply doesn't have that. This may or may not be by design."

"There are some issues from an availability and functionality standpoint, meaning the tool is somewhat slow. There were some slow response periods over the past six to nine months, though it has yet to impact us terribly as we are a relatively small shop. We've noticed it, however, so Devo could improve the responsiveness."

"There is room for improvement in the ability to parse different log types. I would go as far as to say the product is deficient in its ability to parse multiple, different log types, including logs from major vendors that are supported by competitors."

"It's stable but it's not extremely stable."

"Some third-parties don't have specific API connectors built, so we had to work with Devo to get the logs and parse the data using custom parsers, rather than an out-of-the-box solution."

More Devo cons

"The product should improve the triggering rate."

"The dashboard has always been an issue."

"For small to medium-sized customers, Seceon Open Threat Management Platform is good. However, for large enterprises, it is not as effective."

"The product could be improved by including sandboxing capabilities in the next release."

"We are at the client’s end, offering services. They don’t know about security rules and benchmarks. We are working on the discovery and remediation but we don’t really have the intelligence that was available while working with other tools. Human working is also very essential for the solution. The automatic session is impossible to play since it needs to touch Redfin for further analysis. No one has breached our clients."

"The product could be improved by including sandboxing capabilities in the next release."

"It needs more compatibility for co-managed solutions."

"It would be ideal with the processing was more manageable. Not many customers are willing to have a dedicated server with two CPUs and one TB of memory. The cost of this is huge for a smaller organization."

More Seceon Open Threat Management Platform cons

Pricing and Cost Advice

"We have an OEM agreement with Devo. It is very similar to the standard licensing agreement because we are charged in the same way as any other customer, e.g., we use the backroom."

"The way Devo prices things is based on the amount of data, and I wish the tiers had more granularity. Maybe at this point they do, but when we first negotiated with them, there were only three or four tiers."

"Pricing is based on the number of gigabytes of ingestion by volume, and it's on a 30-day average. If you go over one day, that's not a big deal as long as the average is what you expected it to be."

"I rate the pricing a four on a scale of one to ten, where one is cheap, and ten is expensive."

"Devo is a hosted or subscription-based solution, whereas before, we purchased QRadar, so we owned it and just had to pay a maintenance fee. We've encountered this with some other products, too, where we went over to subscription-based. Our thought process is that with subscription based, the provider hosts and maintains the tool, and it's offsite. That comes with some additional fees, but we were able to convince our upper management it was worth the price. We used to pay under 10k a year for maintenance, and now we're paying ten times that. It was a relatively tough sell to our management, but I wonder if we have a choice anymore; this is where the market is."

"I like the pricing very much. They keep it simple. It is a single price based on data ingested, and they do it on an average. If you get a spike of data that flows in, they will not stick it to you or charge you for that. They are very fair about that."

"I'm not involved in the financial aspect, but I think the licensing costs are similar to other solutions. If all the solutions have a similar cost, Devo provides more for the money."

"It's very competitive. That was also a primary draw for us. Some of the licensing models with solutions like Splunk and Sentinel were attractive upfront, but there were so many micro-charges and services we would've had to add on to make them what we wanted. We had to include things like SOAR and extended capabilities, whereas all those capabilities are completely included with the Devo platform. I haven't seen any additional fee."

More Devo pricing and cost advice

"We used the solution's trial version for two months and later purchased it."

"The pricing is very competitive. It's not expensive."

"Seceon Open Threat Management Platform is cost-effective because it's a comprehensive platform that offers high availability."

"The price is quite reasonable."

"It has a per-asset model instead of an ingestion-based model, which gives predictable pricing. In terms of price, it is in the middle to lower range of SIEMs that it competes against. It is the most affordable solution that we have implemented so far. It was much more affordable than anything else I've implemented."

"The solution is cheap and very competitive. It offers good tuning in terms of the pricing. Other solutions like Palo Alto and IBM are more expensive."

"I find Seceon OTM's pricing to be reasonable, not too high or low, just okay for the market standards. I can't disclose specific figures, we pay on a quarterly basis under a service model. I would rate it eight out of ten. As a customer, I always hope for better pricing options."

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

885,264 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

13%

Computer Software Company

Construction Company

Manufacturing Company

Computer Software Company

12%

Manufacturing Company

12%

Financial Services Firm

10%

Outsourcing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	8
Midsize Enterprise	4
Large Enterprise	11

By reviewers
Company Size	Count
Small Business	8
Midsize Enterprise	5
Large Enterprise	1

Questions from the Community

What is your experience regarding pricing and costs for Devo?

Compared to Splunk or SentinelOne, it is really expensive. I rate the product’s pricing a nine out of ten, where one is cheap and ten is expensive.

See all answers

What needs improvement with Devo?

The single pane of glass that Devo offers could be improved. The tools in Devo's active ports need enhancement in their investigative capabilities. The drill-down reports capabilities, while useful...

See all answers

What is your primary use case for Devo?

During my time at MetaBase Q and as a partner integrator of ServiceNow, I had the chance to understand and be part of projects integrating SOCs, NOCs, and Security Operation Centers with Devo. Most...

See all answers

What do you like most about Seceon Open Threat Management Platform?

The algorithm used in Seceon OTM is clear and logical, categorizing events as needed. This helps us identify and respond to threats effectively.

See all answers

What is your experience regarding pricing and costs for Seceon Open Threat Management Platform?

The pricing of Seceon Open Threat Management Platform is very reasonable.

See all answers

What needs improvement with Seceon Open Threat Management Platform?

There are areas for improvement in the customization options. Every ( /products/every-reviews ) quarter, they are developing the platform with new updates based on feedback provided.

See all answers

Comparisons

LogRhythm SIEM vs Devo

Compared 8% of the time

Splunk Enterprise Security vs Devo

Compared 6% of the time

IBM Security QRadar vs Devo

Compared 4% of the time

Microsoft Sentinel vs Devo

Compared 3% of the time

New Relic vs Devo

Compared 3% of the time

More Devo Competitors

IBM Security QRadar vs Seceon Open Threat Management Platform

Compared 11% of the time

Microsoft Sentinel vs Seceon Open Threat Management Platform

Compared 11% of the time

LogRhythm SIEM vs Seceon Open Threat Management Platform

Compared 8% of the time

Splunk Enterprise Security vs Seceon Open Threat Management Platform

Compared 8% of the time

Elastic Security vs Seceon Open Threat Management Platform

Compared 7% of the time

More Seceon Open Threat Management Platform Competitors

Product Reports

Buyer's Guide

Devo

March 2026

Download Devo product report

Buyer's Guide

Seceon Open Threat Management Platform

March 2026

Seceon Open Threat Management Platform report

Download Seceon Open Threat Management Platform product report

Also Known As

No data available

Seceon OTM, Seceon aiSIEM, aiSIEM, Seceon Open Threat Management

Overview

Devo is the only cloud-native logging and security analytics platform that releases the full potential of all your data to empower bold, confident action when it matters most. Only the Devo platform delivers the powerful combination of real-time visibility, high-performance analytics, scalability, multitenancy, and low TCO crucial for monitoring and securing business operations as enterprises accelerate their shift to the cloud.

Devo

Seceon Open Threat Management Platform is a comprehensive cybersecurity solution that offers real-time threat detection, analysis, and response capabilities. It leverages advanced AI and machine learning algorithms to provide proactive threat hunting and automated incident response.

With its intuitive dashboard, users can gain complete visibility into their network, applications, and endpoints, enabling them to identify and mitigate potential risks effectively. The platform integrates seamlessly with existing security infrastructure, consolidating data from various sources for centralized monitoring and analysis.

Its threat intelligence feeds and behavioral analytics enable the identification of both known and unknown threats, ensuring comprehensive protection against advanced cyber attacks. Seceon Open Threat Management Platform empowers security teams with actionable insights, enabling them to prioritize and respond to threats swiftly. With its automated remediation capabilities, it minimizes the impact of attacks and reduces response time. The platform also offers customizable reporting and compliance management features, facilitating regulatory compliance and providing stakeholders with comprehensive security status updates.

Seceon Open Threat Management Platform is a robust and scalable solution that caters to the evolving cybersecurity needs of organizations across industries.

Seceon

Sample Customers

United States Air Force, Rubrik, SentinelOne, Critical Start, NHL, Panda Security, Telefonica, CaixaBank, OpenText, IGT, OneMain Financial, SurveyMonkey, FanDuel, H&R Block, Ulta Beauty, Manulife, Moneylion, Chime Bank, Magna International, American Express Global Business Travel

Caduceus, SUNY

Buyer's Guide

Devo vs. Seceon Open Threat Management Platform

March 2026

Free Report: Devo vs. Seceon Open Threat Management Platform

Find out what your peers are saying about Devo vs. Seceon Open Threat Management Platform and other solutions. Updated: March 2026.

DOWNLOAD NOW

885,264 professionals have used our research since 2012.

See our Devo vs. Seceon Open Threat Management Platform report.

See our list of best Security Information and Event Management (SIEM) vendors.

We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.