Devo vs SentinelOne Singularity AI SIEM comparison

Devo and SentinelOne are both solutions in the Security Information and Event Management (SIEM) category. Devo is ranked #25 with an average rating of 8.0, while SentinelOne is ranked #23 with an average rating of 10.0. Devo holds a 1.1% mindshare in SIEM, compared to SentinelOne’s 1.6% mindshare. Additionally, 95% of Devo users are willing to recommend the solution, compared to 100% of SentinelOne users who would recommend it.

Devo

Read 23 Devo reviews

3,513 Views
2,108 Comparison Views

95% willing to recommend

SentinelOne Singularity AI ...

Read 5 SentinelOne Singularity AI SIEM reviews

1,790 Views
1,450 Comparison Views

100% willing to recommend

Devo

SentinelOne Singularity AI ...

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Mar 29, 2026

Devo and SentinelOne Singularity AI SIEM are competing products in the SIEM landscape. SentinelOne appears to have the upper hand due to its advanced threat detection capabilities.

Features: Devo specializes in high-speed search, multi-tenant architecture, and real-time analytics. SentinelOne stands out with its sophisticated behavioral AI, automated threat hunting, and extensive endpoint protection.

Room for Improvement: Devo requires improvement in user interface customization, scaling advanced analytics, and enhancing native integrations. SentinelOne could improve the onboarding processes, reduce initial setup costs, and enhance reporting flexibility.

Ease of Deployment and Customer Service: Devo offers a cloud-native architecture for simplified deployment and responsive customer support. SentinelOne provides streamlined deployment with strong AI model training and extensive utilization resources.

Pricing and ROI: Devo is praised for its competitive pricing and cost-effectiveness, offering a strong ROI. SentinelOne, while more costly initially, leverages advanced features for long-term gains, appealing to organizations prioritizing top-tier security.

To learn more, read our detailed Devo vs. SentinelOne Singularity AI SIEM Report (Updated: March 2026).

Buyer's Guide

Devo vs. SentinelOne Singularity AI SIEM

March 2026

Download the complete report

Helped 885,311 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Devo

Ranking in Security Information and Event Management (SIEM)

25th

Average Rating

8.4

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Log Management (28th), IT Operations Analytics (9th), AIOps (21st)

SentinelOne Singularity AI ...

Ranking in Security Information and Event Management (SIEM)

23rd

Average Rating

8.6

Reviews Sentiment

6.1

Number of Reviews

Ranking in other categories

AI Observability (22nd)

Mindshare comparison

As of March 2026, in the Security Information and Event Management (SIEM) category, the mindshare of Devo is 1.1%, up from 1.0% compared to the previous year. The mindshare of SentinelOne Singularity AI SIEM is 1.6%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Security Information and Event Management (SIEM) Mindshare Distribution
Product	Mindshare (%)
SentinelOne Singularity AI SIEM	1.6%
Devo	1.1%
Other	97.3%

Security Information and Event Management (SIEM)

Featured Reviews

Francisco JavierRomo

Strategic Account Executive at a computer software company with 51-200 employees

Has improved investigative workflows with interactive dashboards and simplified data correlation

The data analytics cloud component focuses on real-time analytics, which is very impressive. The SIEM collects and correlates logs data from different sources and can integrate with ServiceNow, hardware asset management, and software asset management. The security orchestration, automation, and response (SOAR) is another valuable feature. The security data platform serves as the foundation of Devo. Regarding advanced query capabilities, Devo offers several models including query logs, visual query builder, language integrated query, and SQL, with SQL being the most frequently used querying data capability. The single pane of glass that Devo offers is the SOC. The tools in Devo's active ports are for investigating, not just viewing data. They are more interactive than other market solutions. The drill-down reports capabilities allow analysts to click on any element in a widget. When they see a spike in a line chart for a failed login, which could be a true or false attempt, they can click that spike, and a table widget on the same active board instantly populates with raw logs of data for those specific failed logins. This is particularly important for enterprise companies with numerous endpoints and users. The dynamic filtering of inputs significantly reduces the time cybersecurity analysts spend trying to figure out failed logins and identifying false positives.

Read full review

Prince Joseph

Group Chief Information Officer at NeST Information Technologies Pvt Ltd

Advanced AI-driven monitoring has strengthened investigations and now prioritizes critical threats

I would not say there is anything that could be better in SentinelOne Singularity AI SIEM; I think we have seen something unique in the product. This product has the potential to add more SOC functionality on top of its SIEM, which can automate a few more things because I have the information there. I need to do what I would call security agents or agentic AI to be built on top; it can take care of a lot more analysis and actions. Maybe licensing cost can also be looked at and reduced. We are still to see the automated feature work a little bit more; we are not really using it to the full extent.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Because of the way Devo works, our onboarding time has shrunk by 50 percent at least."

"Devo has a really good website for creating custom configurations."

"The strength of Devo is not only in that it is pretty intuitive, but it gives you the flexibility and creativity to merge feeds. The prime examples would be using the synthesis or union tables that give you phenomenal capabilities... The ability to use a synthesis or union table to combine all those feeds and make heads or tails of what's going on, and link it to go down a thread, is functionality that I hadn't seen before."

"Being able to build and modify dashboards on the fly with Activeboards streamlines my analyst time because my analysts aren't doing it across spreadsheets or five different tools to try to build a timeline out themselves. They can just ingest it all, build a timeline out across all the logging, and all the different information sources in one dashboard. So, it's a huge time saver. It also has the accuracy of being able to look at all those data sources in one view. The log analysis, which would take 40 hours, we can probably get through it in about five to eight hours using Devo."

"Devo helps us to unlock the full power of our data because they have more than 450 parsers, which means that we can ingest pretty much any type of log data."

"It centralizes security management within a business, functioning as a core system for a SOC."

"Scalability is one of Devo's strengths."

"One of the biggest features of the UI is that you see the actual code of what you're doing in the graphical user interface, in a little window on the side. Whatever you're doing, you see the code, what's happening. And you can really quickly switch between using the GUI and using the code. That's really useful."

More Devo pros

"When they face attacks such as ransomware and are dissatisfied with their existing solutions, they switch to SentinelOne Singularity AI SIEM, which is quite good in detecting unknown threats, cleaning the system, and handling ransomware."

"After using SentinelOne Singularity AI SIEM, it has reduced our incident response time by forty to fifty percent compared to other tools."

"Overall, I would assess the overall security posture after implementing SentinelOne Singularity AI SIEM as significantly better."

"SentinelOne Singularity AI SIEM's AI-powered analytics does affect our SOC's ability to reduce false positives; that is one of the biggest advantages because the manpower that I have is limited."

"AI-driven capabilities will give me real-time detection and will protect my autonomous AI interruption."

Cons

"Some basic reporting mechanisms have room for improvement."

"The biggest area with room for improvement in Devo is the Security Operations module that just isn't there yet."

"Technical support could be better."

"One major area for improvement for Devo... is to provide more capabilities around pre-built monitoring. They're working on integrations with different types of systems, but that integration needs to go beyond just onboarding to the platform. It needs to include applications, out-of-the-box, that immediately help people to start monitoring their systems. Such applications would include dashboards and alerts, and then people could customize them for their own needs so that they aren't starting from a blank slate."

"The biggest area with room for improvement in Devo is the Security Operations module that just isn't there yet. That goes back to building out how they're going to do content and larger correlation and aggregation of data across multiple things, as well as natively ingesting CTI to create rule sets."

"Some third-parties don't have specific API connectors built, so we had to work with Devo to get the logs and parse the data using custom parsers, rather than an out-of-the-box solution."

"Some of the documentation could be improved a little bit. A lot of times it doesn't go as deep into some of the critical issues you might run into. They've been really good to shore us up with support, but some of the documentation could be a little bit better."

"Some third-parties don't have specific API connectors built, so we had to work with Devo to get the logs and parse the data using custom parsers, rather than an out-of-the-box solution."

More Devo cons

"Another area for improvement is that the product is somewhat expensive. Pricing could be improved as well."

"At the moment, I feel the pricing is a little bit on the higher side, but the tool is positioned in a place where risk is very high, and we do not want to take chances, so we are prepared to pay the premium."

"In AI SIEM, the areas that have room for improvement are the parsers for third-party integrated data or for third-party data sources that are not native integrations, which could be made a bit easier."

"SentinelOne Singularity AI SIEM has some performance and reliability issues that need improvement."

"It is quite good, but the only downside is that it is costly."

Pricing and Cost Advice

"Devo is definitely cheaper than Splunk. There's no doubt about that. The value from Devo is good. It's definitely more valuable to me than QRadar or LogRhythm or any of the old, traditional SIEMs."

"Be cautious of metadata inclusion for log types in pricing, as there are some "gotchas" with that."

"The way Devo prices things is based on the amount of data, and I wish the tiers had more granularity. Maybe at this point they do, but when we first negotiated with them, there were only three or four tiers."

"Our licensing fees are billed annually and per terabyte."

"It's a per gigabyte cost for ingestion of data. For every gigabyte that you ingest, it's whatever you negotiated your price for. Compared to other contracts that we've had for cloud providers, it's significantly less."

"I like the pricing very much. They keep it simple. It is a single price based on data ingested, and they do it on an average. If you get a spike of data that flows in, they will not stick it to you or charge you for that. They are very fair about that."

"[Devo was] in the ballpark with at least a couple of the other front-runners that we were looking at. Devo is a good value and, given the quality of the product, I would expect to pay more."

"It's very competitive. That was also a primary draw for us. Some of the licensing models with solutions like Splunk and Sentinel were attractive upfront, but there were so many micro-charges and services we would've had to add on to make them what we wanted. We had to include things like SOAR and extended capabilities, whereas all those capabilities are completely included with the Devo platform. I haven't seen any additional fee."

More Devo pricing and cost advice

Information not available

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

885,311 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

13%

Computer Software Company

Construction Company

Manufacturing Company

Healthcare Company

Comms Service Provider

Construction Company

Transportation Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	8
Midsize Enterprise	4
Large Enterprise	11

No data available

Questions from the Community

What is your experience regarding pricing and costs for Devo?

Compared to Splunk or SentinelOne, it is really expensive. I rate the product’s pricing a nine out of ten, where one is cheap and ten is expensive.

See all answers

What needs improvement with Devo?

The single pane of glass that Devo offers could be improved. The tools in Devo's active ports need enhancement in their investigative capabilities. The drill-down reports capabilities, while useful...

See all answers

What is your primary use case for Devo?

During my time at MetaBase Q and as a partner integrator of ServiceNow, I had the chance to understand and be part of projects integrating SOCs, NOCs, and Security Operation Centers with Devo. Most...

See all answers

What needs improvement with SentinelOne Singularity AI SIEM?

In AI SIEM, the areas that have room for improvement are the parsers for third-party integrated data or for third-party data sources that are not native integrations, which could be made a bit easi...

See all answers

What is your primary use case for SentinelOne Singularity AI SIEM?

Our use case with SentinelOne Singularity AI SIEM is primarily AI observability for a large part. We are using it for SIEM purposes as well. Prior to the inclusion of Purple AI, it was exclusively ...

See all answers

What advice do you have for others considering SentinelOne Singularity AI SIEM?

My impression of the AI-driven threat detection capabilities of SentinelOne Singularity AI SIEM is great. I am really looking forward to the upcoming feature with agentic incident investigation. If...

See all answers

Comparisons

LogRhythm SIEM vs Devo

Compared 8% of the time

Splunk Enterprise Security vs Devo

Compared 6% of the time

IBM Security QRadar vs Devo

Compared 4% of the time

Microsoft Sentinel vs Devo

Compared 3% of the time

New Relic vs Devo

Compared 3% of the time

More Devo Competitors

Microsoft Sentinel vs SentinelOne Singularity AI SIEM

Compared 23% of the time

Fortinet FortiSIEM vs SentinelOne Singularity AI SIEM

Compared 13% of the time

Huntress Managed SIEM vs SentinelOne Singularity AI SIEM

Compared 7% of the time

Huntress Managed EDR vs SentinelOne Singularity AI SIEM

Compared 7% of the time

Wazuh vs SentinelOne Singularity AI SIEM

Compared 6% of the time

More SentinelOne Singularity AI SIEM Competitors

Product Reports

Buyer's Guide

Devo

March 2026

Download Devo product report

Buyer's Guide

SentinelOne Singularity AI SIEM

March 2026

Download SentinelOne Singularity AI SIEM product report

Overview

Devo is the only cloud-native logging and security analytics platform that releases the full potential of all your data to empower bold, confident action when it matters most. Only the Devo platform delivers the powerful combination of real-time visibility, high-performance analytics, scalability, multitenancy, and low TCO crucial for monitoring and securing business operations as enterprises accelerate their shift to the cloud.

Devo

SentinelOne Singularity AI SIEM offers comprehensive security information and incident management designed to enhance threat detection, response, and investigation capabilities within enterprise environments.

SentinelOne Singularity AI SIEM is known for its robust capabilities in the realm of cybersecurity, providing organizations with an advanced tool to combat modern threats. The platform integrates machine learning and artificial intelligence to automate threat identification and streamline incident response processes. Its intuitive interface allows teams to manage security events efficiently, ensuring rapid reaction to potential vulnerabilities. As a scalable tool, it adapts to evolving security demands, providing valuable insights to safeguard critical business operations.

What are the important features of SentinelOne Singularity AI SIEM?

Automated Threat Detection: Uses AI to identify threats with minimal human intervention.
Comprehensive Data Analysis: Capable of processing extensive security-related data for informed decision-making.
Real-time Monitoring: Continuously tracks events for immediate alerts on suspicious activities.
Scalability: Adapts to the changing needs of enterprises, maintaining effectiveness at any scale.
Seamless Integration: Easily connects with existing security infrastructure to enhance overall protection.

What are the key benefits or ROI from SentinelOne Singularity AI SIEM?

Improved Security Posture: Enhances the ability to detect and respond to complex threats, minimizing risks.
Operational Efficiency: Automates routine processes, allowing security teams to focus on strategic tasks.
Cost-effectiveness: Reduces the need for extensive manual analysis, cutting down operational costs.
Business Continuity: Protects critical operations from disruptions, ensuring uninterrupted service delivery.
Scalability and Flexibility: Ensures ongoing adaptability to growing and dynamic security demands.

In industries such as finance and healthcare, implementation of SentinelOne Singularity AI SIEM often means tailored solutions to protect sensitive data, meeting regulatory compliance. These sectors appreciate its capability to provide detailed insights and reduce the risk of data breaches, thus preserving stakeholder trust.

SentinelOne

Sample Customers

United States Air Force, Rubrik, SentinelOne, Critical Start, NHL, Panda Security, Telefonica, CaixaBank, OpenText, IGT, OneMain Financial, SurveyMonkey, FanDuel, H&R Block, Ulta Beauty, Manulife, Moneylion, Chime Bank, Magna International, American Express Global Business Travel

Information Not Available

Buyer's Guide

Devo vs. SentinelOne Singularity AI SIEM

March 2026

Free Report: Devo vs. SentinelOne Singularity AI SIEM

Find out what your peers are saying about Devo vs. SentinelOne Singularity AI SIEM and other solutions. Updated: March 2026.

DOWNLOAD NOW

885,311 professionals have used our research since 2012.

See our Devo vs. SentinelOne Singularity AI SIEM report.

See our list of best Security Information and Event Management (SIEM) vendors.

We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.