Devo vs SolarWinds Security Event Manager comparison

Devo and SolarWinds are both solutions in the Security Information and Event Management (SIEM) category. Devo is ranked #26 with an average rating of 8.0, while SolarWinds is ranked #34 with an average rating of 7.7. Devo holds a 1.2% mindshare in SIEM, compared to SolarWinds’s 1.0% mindshare. Additionally, 95% of Devo users are willing to recommend the solution, compared to 82% of SolarWinds users who would recommend it.

Devo

Read 23 Devo reviews

5,226 Views
3,031 Comparison Views

95% willing to recommend

SolarWinds Security Event M...

Read 27 SolarWinds Security Event Manager reviews

2,692 Views
2,584 Comparison Views

82% willing to recommend

Devo

SolarWinds Security Event M...

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 18, 2024

SolarWinds Security Event Manager and Devo are widely used in the security event management sector. Devo has the upper hand due to its advanced features and scalability.

Features: SolarWinds Security Event Manager is praised for its log management, real-time event correlation, and compliance reporting. Devo is valued for its scalability, advanced analytics, and integration capabilities.

Room for Improvement: Users of SolarWinds Security Event Manager indicate that its performance can be affected under heavy loads and often request more integration options. Devo users point to the need for a more intuitive navigation process and better initial setup support.

Ease of Deployment and Customer Service: SolarWinds Security Event Manager is noted for its straightforward deployment but receives mixed feedback on customer service response times. Devo's deployment process is complex but benefits from responsive and efficient customer service.

Pricing and ROI: SolarWinds Security Event Manager is favored for its competitive pricing and good return on investment. Devo, despite its higher cost, is considered worth the price due to its comprehensive features and high ROI.

To learn more, read our detailed Devo vs. SolarWinds Security Event Manager Report (Updated: April 2026).

Buyer's Guide

Devo vs. SolarWinds Security Event Manager

April 2026

Download the complete report

Helped 893,311 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Devo

Ranking in Security Information and Event Management (SIEM)

26th

Average Rating

8.4

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Log Management (27th), IT Operations Analytics (7th), AIOps (19th)

SolarWinds Security Event M...

Ranking in Security Information and Event Management (SIEM)

34th

Average Rating

7.8

Reviews Sentiment

5.7

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of May 2026, in the Security Information and Event Management (SIEM) category, the mindshare of Devo is 1.2%, up from 1.0% compared to the previous year. The mindshare of SolarWinds Security Event Manager is 1.0%, up from 0.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Security Information and Event Management (SIEM) Mindshare Distribution
Product	Mindshare (%)
Devo	1.2%
SolarWinds Security Event Manager	1.0%
Other	97.8%

Security Information and Event Management (SIEM)

Featured Reviews

Francisco JavierRomo

Strategic Account Executive at a computer software company with 51-200 employees

Has improved investigative workflows with interactive dashboards and simplified data correlation

The data analytics cloud component focuses on real-time analytics, which is very impressive. The SIEM collects and correlates logs data from different sources and can integrate with ServiceNow, hardware asset management, and software asset management. The security orchestration, automation, and response (SOAR) is another valuable feature. The security data platform serves as the foundation of Devo. Regarding advanced query capabilities, Devo offers several models including query logs, visual query builder, language integrated query, and SQL, with SQL being the most frequently used querying data capability. The single pane of glass that Devo offers is the SOC. The tools in Devo's active ports are for investigating, not just viewing data. They are more interactive than other market solutions. The drill-down reports capabilities allow analysts to click on any element in a widget. When they see a spike in a line chart for a failed login, which could be a true or false attempt, they can click that spike, and a table widget on the same active board instantly populates with raw logs of data for those specific failed logins. This is particularly important for enterprise companies with numerous endpoints and users. The dynamic filtering of inputs significantly reduces the time cybersecurity analysts spend trying to figure out failed logins and identifying false positives.

Read full review

Yashokanth Partkunan

Managed Services Engineer at Loop1 Systems

Has supported client needs efficiently but requires deeper analysis features and faster support

The log analyzing capability of SolarWinds Security Event Manager should go into more depth than the current environment. More modification and enhancements are required on the dashboard side in order to make it closer to optimal performance. From observation and feedback from users, they need more functionality related to monitoring, and in-depth analyzing needs to be improved.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"One of the immediate improvements that come to mind is the amount of hot, searchable data, as in the SIEM we had before we were only able to search back 90 days of hot, searchable data, whereas here we have 400 days worth, which has definitely improved our threat hunting capabilities."

"Because of the way Devo works, our onboarding time has shrunk by 50 percent at least."

"The drill-down reports capabilities allow analysts to click on any element in a widget. When they see a spike in a line chart for a failed login, which could be a true or false attempt, they can click that spike, and a table widget on the same active board instantly populates with raw logs of data for those specific failed logins."

"The most valuable feature is that it has native MSSP capabilities and maintains perfect data separation. It does all of that in a very easy-to-manage cloud-based solution."

"But from a SaaS standpoint, if not best-in-breed, Devo is certainly in the top-two or top-three."

"Devo helps us to unlock the full power of our data because they have more than 450 parsers, which means that we can ingest pretty much any type of log data."

"Devo saves us hours in every investigation."

"Those 400 days of hot data mean that people can look for trends and at what happened in the past. And they can not only do so from a security point of view, but even for operational use cases. In the past, our operational norm was to keep live data for only 30 days. Our users were constantly asking us for at least 90 days, and we really couldn't even do that. That's one reason that having 400 days of live data is pretty huge. As our users start to use it and adopt this system, we expect people to be able to do those long-term analytics."

More Devo pros

"We did previously use a different solution, but SolarWinds is much better; it's easy to interact with SolarWinds, easy to operate, easy to configure, and generally easier compared to what we were working with before."

"The most valuable feature of this solution is the visibility into both attempted and failed logins."

"It has in-depth monitoring capabilities and an easy way for setting up dashboards."

"We had to integrate with other teams, and the infrastructure deployment didn't take long. The integration involves learning with different teams, networking, and configuring various network devices and servers. Infrastructure deployment only took one or two days."

"It supports high availability, which is very helpful."

"The out of the box reports and dashboard. It was easy to trim down these windows to something we could quickly use."

"We were suffering from a lack of visibility into our logs, so we implemented SolarWinds LEM."

"SolarWinds is effective for server, network, and log monitoring. It's also good for IP address management. We also have a patch manager, but we're still working on getting that operational."

More SolarWinds Security Event Manager pros

Cons

"From our experience, the Devo agent needs some work. They built it on top of OS Query's open-source framework. It seems like it wasn't tuned properly to handle a large volume of Windows event logs. In our experience, there would definitely be some room for improvement. A lot of SIEMs on the market have their own agent infrastructure. I think Devo's working towards that, but I think that it needs some improvement as far as keeping up with high-volume environments."

"They can improve their AI capabilities"

"Some third-parties don't have specific API connectors built, so we had to work with Devo to get the logs and parse the data using custom parsers, rather than an out-of-the-box solution."

"There is room for improvement in the ability to parse different log types. I would go as far as to say the product is deficient in its ability to parse multiple, different log types, including logs from major vendors that are supported by competitors. Additionally, the time that it takes to turn around a supported parser for customers and common log source types, which are generally accepted standards in the industry, is not acceptable. This has impacted customer onboarding and customer relationships for us on multiple fronts."

"Devo has a lot of cloud connectors, but they need to do a little bit of work there."

"There's room for improvement within the GUI. There is also some room for improvement within the native parsers they support. But I can say that about pretty much any solution in this space."

"My opinion on the solution's technical support is not as great as it could be because of the issues I have faced regarding the service management element."

More Devo cons

"We have automated threat detection in the Alliance Security, Antoinette. However, if these features could be further enhanced, it would simplify my work, potentially allowing me to allocate more time to address complex issues."

"SolarWinds should improve its correlation capabilities. The correlation does not automatically detect and reduce the events fast enough."

"Training for this solution needs to be improved, as new employees are sometimes unfamiliar with the product."

"I imagine we will have to develop our own reports soon, this seems to be more cumbersome."

"I think the product can use some improvement on the reporting side. The reporting could be easier and more robust."

"The solution's technical support is okay, but we don't have an SLA, and sometimes the response times are very slow."

"The company had to use a third party for the implementation of the solution."

More SolarWinds Security Event Manager cons

Pricing and Cost Advice

"We have an OEM agreement with Devo. It is very similar to the standard licensing agreement because we are charged in the same way as any other customer, e.g., we use the backroom."

"I rate the pricing a four on a scale of one to ten, where one is cheap, and ten is expensive."

"Be cautious of metadata inclusion for log types in pricing, as there are some "gotchas" with that."

"The way Devo prices things is based on the amount of data, and I wish the tiers had more granularity. Maybe at this point they do, but when we first negotiated with them, there were only three or four tiers."

"It's very competitive. That was also a primary draw for us. Some of the licensing models with solutions like Splunk and Sentinel were attractive upfront, but there were so many micro-charges and services we would've had to add on to make them what we wanted. We had to include things like SOAR and extended capabilities, whereas all those capabilities are completely included with the Devo platform. I haven't seen any additional fee."

"[Devo was] in the ballpark with at least a couple of the other front-runners that we were looking at. Devo is a good value and, given the quality of the product, I would expect to pay more."

"Our licensing fees are billed annually and per terabyte."

"Devo was very cost-competitive... Devo did come with that 400 days of hot data, and that was not the case with other products."

More Devo pricing and cost advice

"It is in the appropriate mid-range. It is not as expensive as some of the other solutions. It is also not cheap."

"We do a yearly license renewal. For a year, the solution costs roughly $500,000 USD. There are no costs beyond this yearly fee."

"Licensing is on devices, so if you have many, then this may be high."

"The tool is available at a good price for customers compared to other solutions in the market. I rate the product's price as an eight out of ten."

"The pricing model would benefit from having package deals with other SolarWinds products."

"Licenses can only be purchased in blocks of fifty at a time."

"The price of SolarWinds Security Event Manager is reasonable."

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

893,311 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

13%

Construction Company

Computer Software Company

Outsourcing Company

Financial Services Firm

15%

Manufacturing Company

10%

Construction Company

10%

University

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	8
Midsize Enterprise	4
Large Enterprise	11

By reviewers
Company Size	Count
Small Business	19
Midsize Enterprise	3
Large Enterprise	7

Questions from the Community

What is your experience regarding pricing and costs for Devo?

Compared to Splunk or SentinelOne, it is really expensive. I rate the product’s pricing a nine out of ten, where one is cheap and ten is expensive.

See all answers

What needs improvement with Devo?

The single pane of glass that Devo offers could be improved. The tools in Devo's active ports need enhancement in their investigative capabilities. The drill-down reports capabilities, while useful...

See all answers

What is your primary use case for Devo?

During my time at MetaBase Q and as a partner integrator of ServiceNow, I had the chance to understand and be part of projects integrating SOCs, NOCs, and Security Operation Centers with Devo. Most...

See all answers

What is your experience regarding pricing and costs for SolarWinds Security Event Manager ?

The tool is available at a good price for customers compared to other solutions in the market. I rate the product's price as an eight out of ten.

See all answers

What needs improvement with SolarWinds Security Event Manager ?

See all answers

What is your primary use case for SolarWinds Security Event Manager ?

I work with all SolarWinds products mostly, including Network Configuration Manager and NPM. I am a reseller. I usually recommend SolarWinds products for Loop1. It's for the bigger ones; we are the...

See all answers

Comparisons

LogRhythm SIEM vs Devo

Compared 9% of the time

Splunk Enterprise Security vs Devo

Compared 7% of the time

New Relic vs Devo

Compared 4% of the time

IBM Security QRadar vs Devo

Compared 3% of the time

Microsoft Sentinel vs Devo

Compared 3% of the time

More Devo Competitors

Splunk Enterprise Security vs SolarWinds Security Event Manager

Compared 11% of the time

IBM Security QRadar vs SolarWinds Security Event Manager

Compared 8% of the time

ManageEngine Log360 vs SolarWinds Security Event Manager

Compared 5% of the time

Wazuh vs SolarWinds Security Event Manager

Compared 5% of the time

Coralogix vs SolarWinds Security Event Manager

Compared 5% of the time

More SolarWinds Security Event Manager Competitors

Product Reports

Buyer's Guide

Devo

May 2026

Download Devo product report

Buyer's Guide

SolarWinds Security Event Manager

April 2026

SolarWinds Security Event Manager report

Download SolarWinds Security Event Manager product report

Also Known As

No data available

SolarWinds LEM, Solarwinds SIEM, TriGeo, Log and Event Manager

Overview

Devo offers powerful visual analytics, real-time data querying, and log integration capabilities within a cloud-native, multi-tenant architecture, supporting extended data retention ideal for long-term analysis and compliance.

Devo is recognized for its Activeboards, which facilitate visual analytics. High-speed search capabilities and real-time analytics enable efficient data manipulation and querying. Its multi-tenant architecture supports effective data segregation and customization tailored to distinct business needs, enhancing its value for handling complex log integrations. With extended data retention of 400 days and a cloud-native architecture, Devo is a robust platform for long-term analysis and compliance requirements. Though opportunities exist to improve browser stability on large searches, SOAR integrations, and its parser capabilities, Devo remains essential for incident response and security monitoring, offering centralized data storage and analysis.

What are Devo's most important features?

Activeboards: Facilitate visual analytics and data exploration.
High-Speed Search: Enables fast data querying and manipulation.
Real-Time Analytics: Supports instant insights and decision-making.
Multi-Tenant Architecture: Allows effective data segregation and customization.
Extended Data Retention: Offers 400-day log retention for compliance and analysis.
Complex Log Integration: Handles intricate data sources effortlessly.

What benefits and ROI should organizations look for in reviews?

Visual Insights: Enhance understanding through interactive dashboards.
Performance Efficiency: Saves time with high-speed data search and real-time results.
Customization Flexibility: Fits specific business requirements with multi-tenant architecture.
Long-Term Compliance: Ensures alignment with extended data retention needs.
Centralized Monitoring: Enables comprehensive incident response and security monitoring.

Devo is extensively used in industries focused on incident response and digital forensics, centralizing data for security monitoring across hybrid environments. Organizations benefit from its ability to store and analyze aggregated logs, creating alerts and dashboards to enhance visibility for network and endpoint activities in multi-domain settings.

Devo

SolarWinds Security Event Manager is recognized for its ease of use, offering efficient log monitoring and a user-friendly interface. The tool supports a range of monitoring functions and provides strong security capabilities across platform configurations.

Designed for comprehensive log analysis and security event monitoring, SolarWinds Security Event Manager provides robust reporting, timely alerts, and supports file integrity monitoring. Entities use it to ensure compliance, monitor network activities, and prevent threats such as ransomware. Integration and setup are straightforward, enhancing its flexibility for centralized log collection and analysis. While the tool is effective, improvements are needed in performance scaling, interface updates from Flash, and enhanced customization and reporting options.

What are the key features of SolarWinds Security Event Manager?

Log Monitoring: Tracks and analyzes log files for security events.
File Integrity Monitoring: Detects unauthorized changes in files.
Reporting and Alerts: Provides extensive reporting with timely security alerts.
Compliance Maintenance: Assists in maintaining compliance with audit standards.
User-Friendly Interface: Features intuitive navigation and versatile integration capabilities.

What benefits should users consider when evaluating SolarWinds Security Event Manager?

Ease of Use: Intuitive setup and navigation simplify user experience.
Security Enhancements: Strong monitoring helps detect and prevent ransomware threats.
Compliance Support: Ensures compliance with audit requirements, facilitating regulatory adherence.
Integration: Seamlessly connects with other tools for centralized data management.

Industries such as financial services, healthcare, and government often implement SolarWinds Security Event Manager to monitor sensitive information, ensure adherence to regulatory compliance, and manage network security efficiently. The tool's ability to analyze logs and prevent threats makes it valuable for businesses needing robust security event management.

SolarWinds

Sample Customers

United States Air Force, Rubrik, SentinelOne, Critical Start, NHL, Panda Security, Telefonica, CaixaBank, OpenText, IGT, OneMain Financial, SurveyMonkey, FanDuel, H&R Block, Ulta Beauty, Manulife, Moneylion, Chime Bank, Magna International, American Express Global Business Travel

NetSuite, EasyStreet, Legacy Texas Bank, and Energy Federal Credit Union, to name a few.

Buyer's Guide

Devo vs. SolarWinds Security Event Manager

April 2026

Free Report: Devo vs. SolarWinds Security Event Manager

Find out what your peers are saying about Devo vs. SolarWinds Security Event Manager and other solutions. Updated: April 2026.

DOWNLOAD NOW

893,311 professionals have used our research since 2012.

See our Devo vs. SolarWinds Security Event Manager report.

See our list of best Security Information and Event Management (SIEM) vendors.

We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.