Devo vs SolarWinds Security Event Manager comparison

Why PeerSpot?

Devo and SolarWinds are both solutions in the Security Information and Event Management (SIEM) category. Devo is ranked #16 with an average rating of 7.9, while SolarWinds is ranked #38 with an average rating of 7.0. Devo holds a 1.2% mindshare in SIEM, compared to SolarWinds’s 1.1% mindshare. Additionally, 93% of Devo users are willing to recommend the solution, compared to 82% of SolarWinds users who would recommend it.

Devo

Read 30 Devo reviews

8,527 Views
4,519 Comparison Views

93% willing to recommend

SolarWinds Security Event M...

Read 27 SolarWinds Security Event Manager reviews

4,470 Views
4,291 Comparison Views

82% willing to recommend

Devo

SolarWinds Security Event M...

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 18, 2024

SolarWinds Security Event Manager and Devo are widely used in the security event management sector. Devo has the upper hand due to its advanced features and scalability.

Features: SolarWinds Security Event Manager is praised for its log management, real-time event correlation, and compliance reporting. Devo is valued for its scalability, advanced analytics, and integration capabilities.

Room for Improvement: Users of SolarWinds Security Event Manager indicate that its performance can be affected under heavy loads and often request more integration options. Devo users point to the need for a more intuitive navigation process and better initial setup support.

Ease of Deployment and Customer Service: SolarWinds Security Event Manager is noted for its straightforward deployment but receives mixed feedback on customer service response times. Devo's deployment process is complex but benefits from responsive and efficient customer service.

Pricing and ROI: SolarWinds Security Event Manager is favored for its competitive pricing and good return on investment. Devo, despite its higher cost, is considered worth the price due to its comprehensive features and high ROI.

To learn more, read our detailed Devo vs. SolarWinds Security Event Manager Report (Updated: November 2026).

Buyer's Guide

Devo vs. SolarWinds Security Event Manager

November 2026

Download the complete report

Helped 921,749 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Devo

Ranking in Security Information and Event Management (SIEM)

16th

Average Rating

8.2

Reviews Sentiment

6.5

Number of Reviews

Ranking in other categories

Log Management (21st), IT Operations Analytics (7th), AIOps (17th)

SolarWinds Security Event M...

Ranking in Security Information and Event Management (SIEM)

38th

Average Rating

7.8

Reviews Sentiment

5.7

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of November 2026, in the Security Information and Event Management (SIEM) category, the mindshare of Devo is 1.2%, up from 1.1% compared to the previous year. The mindshare of SolarWinds Security Event Manager is 1.1%, up from 0.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Security Information and Event Management (SIEM) Mindshare Distribution
Product	Mindshare (%)
Devo	1.2%
SolarWinds Security Event Manager	1.1%
Other	97.7%

Security Information and Event Management (SIEM)

Featured Reviews

Usama Khan

Team Lead Soc at a tech services company with 51-200 employees

Advanced threat hunting has improved SOC visibility and now supports faster incident response

Devo can improve in how its connectors enhance integration with third-party tools. Devo's architecture works by having you deploy a relay server in the data center of the client side and Devo SIEM is basically on the AWS cloud. There are specific ports which are enabled on the relay server, which are 514 and 13000, 13151, 152. However, when we talk about databases and custom integrations, there are not default ports in the relay server. No default ports are defined. For JDBC drivers, the port number is 1433, but it is not in the relay server. You have to add it manually. For Oracle RDBMS, the port is 1521, and it is also not there by default. I would appreciate more third-party integrations including Fortinet and others. Machine learning models can also be improved. Playbooks in the SOAR can also be improved. Regarding playbooks for automation, we utilize playbooks for automation in SOAR for automated IOC blocking on a firewall, on a web application firewall, on DNS security, etc. The only option for us to run the playbook is to schedule the job for it. However, if I want to manually run the playbook, there is no option for doing so. This needs improvement.

Read full review

Yashokanth Partkunan

Managed Services Engineer at Loop1 Systems

Has supported client needs efficiently but requires deeper analysis features and faster support

The log analyzing capability of SolarWinds Security Event Manager should go into more depth than the current environment. More modification and enhancements are required on the dashboard side in order to make it closer to optimal performance. From observation and feedback from users, they need more functionality related to monitoring, and in-depth analyzing needs to be improved.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Even if it's a relatively technical tool or platform, it's very intuitive and graphical. It's very appealing in terms of the user interface. The UI has a graphically interface with the raw data in a table. The table can be as big as you want it, depending on your use case. You can easily get a report combining your data, along with calculations and graphical dashboards. You don't need a lot of training, because the UI is relatively very intuitive."

"Devo's speed and performance allows us to query in real-time and keep up with what is actually happening on the network, then respond effectively to events."

"The querying and the log-retention capabilities are pretty powerful. Those provide some of the biggest value-add for us."

"Devo has positively impacted our organization because we have been using only one tool for our centralized logging systems."

"The ability to have high performance, high-speed search capability is incredibly important for us. When it comes to doing security analysis, you don't want to be doing is sitting around waiting to get data back while an attacker is sitting on a network, actively attacking it. You need to be able to answer questions quickly. If I see an indicator of attack, I need to be able to rapidly pivot and find data, then analyze it and find more data to answer more questions. You need to be able to do that quickly. If I'm sitting around just waiting to get my first response, then it ends up moving too slow to keep up with the attacker. Devo's speed and performance allows us to query in real-time and keep up with what is actually happening on the network, then respond effectively to events."

"It's very, very versatile."

"Devo provides good value and, given the quality of the product, I would expect to pay more."

"We can ingest virtually any log source, which is much better than our previous solution."

More Devo pros

"It has in-depth monitoring capabilities and an easy way for setting up dashboards. I can expand in various areas, or I can reduce areas. It supports different types of breakdowns, filters, and rules. It is very simple for an out-of-the-box type of product. It doesn't take a lot of time to figure it out, which is unlike some of the solutions that I have looked at. It meets all the aspects."

"It supports high availability, which is very helpful."

"SolarWinds is effective for server, network, and log monitoring. It's also good for IP address management. We also have a patch manager, but we're still working on getting that operational."

"We had to integrate with other teams, and the infrastructure deployment didn't take long. The integration involves learning with different teams, networking, and configuring various network devices and servers. Infrastructure deployment only took one or two days."

"The out of the box reports and dashboard. It was easy to trim down these windows to something we could quickly use."

"The solution helps me to go back in time and search for different events. For example, if you wanted to know who activated an account; you could go back in time and find out."

"The most valuable feature of the solution is intuitivity of navigation; it's easy to build rules and actions which are based on the logs and event types we collect with the software."

"The most valuable feature is the reporting."

More SolarWinds Security Event Manager pros

Cons

"The cost is a little higher compared to other tools such as DataDog or Elasticsearch, so they could work on reducing costs."

"The biggest area with room for improvement in Devo is the Security Operations module that just isn't there yet. That goes back to building out how they're going to do content and larger correlation and aggregation of data across multiple things, as well as natively ingesting CTI to create rule sets."

"Both response time and support quality need attention."

"We only use the core functionality and one of the reasons for this is that their security operation center needs improvement."

"The price is one problem with Devo."

"There's room for improvement within the GUI. There is also some room for improvement within the native parsers they support. But I can say that about pretty much any solution in this space."

"Where Devo has room for improvement is the data ingestion and parsing. We tend to have to work with the Devo support team to bring on and ingest new sources of data."

"Devo has a lot of cloud connectors, but they need to do a little bit of work there. They've got good integrations with the public cloud, but there are a lot of cloud SaaS systems that they still need to work with on integrations, such as Salesforce and other SaaS providers where we need to get access logs."

More Devo cons

"I think the customization area in the tool can be considered as an area of concern where improvements are required."

"SolarWinds should improve its correlation capabilities. The correlation does not automatically detect and reduce the events fast enough. You have to manually do a correlation report, which means the tool is not scalable in many ways."

"The only issue is the pricetag. SolarWinds is a costly solution."

"The product should improve the ease with which you can create event alerts. They are not as hard now but you need to have an easier way."

"We have automated threat detection in the Alliance Security, Antoinette. However, if these features could be further enhanced, it would simplify my work, potentially allowing me to allocate more time to address complex issues."

"It can be difficult for users who are inexperienced with the solution."

"The main area that would mean a big improvement for me would be for the product to include multiple dashboards."

"The log analyzing capability of SolarWinds Security Event Manager should go into more depth than the current environment."

More SolarWinds Security Event Manager cons

Pricing and Cost Advice

"Be cautious of metadata inclusion for log types in pricing, as there are some "gotchas" with that."

"I like the pricing very much. They keep it simple. It is a single price based on data ingested, and they do it on an average. If you get a spike of data that flows in, they will not stick it to you or charge you for that. They are very fair about that."

"Devo is a hosted or subscription-based solution, whereas before, we purchased QRadar, so we owned it and just had to pay a maintenance fee. We've encountered this with some other products, too, where we went over to subscription-based. Our thought process is that with subscription based, the provider hosts and maintains the tool, and it's offsite. That comes with some additional fees, but we were able to convince our upper management it was worth the price. We used to pay under 10k a year for maintenance, and now we're paying ten times that. It was a relatively tough sell to our management, but I wonder if we have a choice anymore; this is where the market is."

"Devo is definitely cheaper than Splunk. There's no doubt about that. The value from Devo is good. It's definitely more valuable to me than QRadar or LogRhythm or any of the old, traditional SIEMs."

"I rate the pricing a four on a scale of one to ten, where one is cheap, and ten is expensive."

"We have an OEM agreement with Devo. It is very similar to the standard licensing agreement because we are charged in the same way as any other customer, e.g., we use the backroom."

"It's a per gigabyte cost for ingestion of data. For every gigabyte that you ingest, it's whatever you negotiated your price for. Compared to other contracts that we've had for cloud providers, it's significantly less."

"Our licensing fees are billed annually and per terabyte."

More Devo pricing and cost advice

"Licensing is on devices, so if you have many, then this may be high."

"Licenses can only be purchased in blocks of fifty at a time."

"The tool is available at a good price for customers compared to other solutions in the market. I rate the product's price as an eight out of ten."

"The pricing model would benefit from having package deals with other SolarWinds products."

"It is in the appropriate mid-range. It is not as expensive as some of the other solutions. It is also not cheap."

"We do a yearly license renewal. For a year, the solution costs roughly $500,000 USD. There are no costs beyond this yearly fee."

"The price of SolarWinds Security Event Manager is reasonable."

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

921,749 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

16%

Outsourcing Company

11%

Construction Company

10%

Manufacturing Company

12%

Outsourcing Company

12%

Construction Company

11%

Financial Services Firm

10%

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	11
Midsize Enterprise	6
Large Enterprise	15

By reviewers
Company Size	Count
Small Business	19
Midsize Enterprise	3
Large Enterprise	7

Questions from the Community

What is your experience regarding pricing and costs for Devo?

The pricing could be simpler, and while the initial setup cost for a new instance is a bit expensive, the licensing can currently be user-based or driven by log volume, which is better if there is ...

See all answers

What needs improvement with Devo?

In terms of improvements, I think Devo falls short with their support model, as they rely mainly on their support team in Spain. Although they do have a support team in North America, they lack kno...

See all answers

What is your primary use case for Devo?

Devo is the bank's centralized log management platform that my team and I rely on the most. For centralized log management in our day-to-day work, one of the biggest data users would be our Red...

See all answers

What needs improvement with SolarWinds Security Event Manager ?

See all answers

What is your primary use case for SolarWinds Security Event Manager ?

I work with all SolarWinds products mostly, including Network Configuration Manager and NPM. I am a reseller. I usually recommend SolarWinds products for Loop1. It's for the bigger ones; we are...

See all answers

What advice do you have for others considering SolarWinds Security Event Manager ?

I am still dealing with SolarWinds products and use most of their solutions. User-friendly configuration is key, and the configurations are simple, not complex. The only important part is what we d...

See all answers

Comparisons

Splunk Enterprise Security vs Devo

Compared 7% of the time

LogRhythm SIEM vs Devo

Compared 6% of the time

New Relic vs Devo

Compared 4% of the time

Datadog vs Devo

Compared 3% of the time

Palantir Foundry vs Devo

Compared 2% of the time

More Devo Competitors

Splunk Enterprise Security vs SolarWinds Security Event Manager

Compared 10% of the time

IBM Security QRadar vs SolarWinds Security Event Manager

Compared 10% of the time

Sumo Logic Security vs SolarWinds Security Event Manager

Compared 8% of the time

LevelBlue USM Anywhere vs SolarWinds Security Event Manager

Compared 4% of the time

Securonix Next-Gen SIEM vs SolarWinds Security Event Manager

Compared 4% of the time

More SolarWinds Security Event Manager Competitors

Product Reports

Buyer's Guide

Devo

November 2026

Download Devo product report

Buyer's Guide

SolarWinds Security Event Manager

October 2026

SolarWinds Security Event Manager report

Download SolarWinds Security Event Manager product report

Also Known As

No data available

SolarWinds LEM, Solarwinds SIEM, TriGeo, Log and Event Manager

Overview

Devo offers powerful visual analytics, real-time data querying, and log integration capabilities within a cloud-native, multi-tenant architecture, supporting extended data retention ideal for long-term analysis and compliance.

Devo is recognized for its Activeboards, which facilitate visual analytics. High-speed search capabilities and real-time analytics enable efficient data manipulation and querying. Its multi-tenant architecture supports effective data segregation and customization tailored to distinct business needs, enhancing its value for handling complex log integrations. With extended data retention of 400 days and a cloud-native architecture, Devo is a robust platform for long-term analysis and compliance requirements. Though opportunities exist to improve browser stability on large searches, SOAR integrations, and its parser capabilities, Devo remains essential for incident response and security monitoring, offering centralized data storage and analysis.

What are Devo's most important features?

Activeboards: Facilitate visual analytics and data exploration.
High-Speed Search: Enables fast data querying and manipulation.
Real-Time Analytics: Supports instant insights and decision-making.
Multi-Tenant Architecture: Allows effective data segregation and customization.
Extended Data Retention: Offers 400-day log retention for compliance and analysis.
Complex Log Integration: Handles intricate data sources effortlessly.

What benefits and ROI should organizations look for in reviews?

Visual Insights: Enhance understanding through interactive dashboards.
Performance Efficiency: Saves time with high-speed data search and real-time results.
Customization Flexibility: Fits specific business requirements with multi-tenant architecture.
Long-Term Compliance: Ensures alignment with extended data retention needs.
Centralized Monitoring: Enables comprehensive incident response and security monitoring.

Devo is extensively used in industries focused on incident response and digital forensics, centralizing data for security monitoring across hybrid environments. Organizations benefit from its ability to store and analyze aggregated logs, creating alerts and dashboards to enhance visibility for network and endpoint activities in multi-domain settings.

Devo

SolarWinds Security Event Manager is recognized for its ease of use, offering efficient log monitoring and a user-friendly interface. The tool supports a range of monitoring functions and provides strong security capabilities across platform configurations.

Designed for comprehensive log analysis and security event monitoring, SolarWinds Security Event Manager provides robust reporting, timely alerts, and supports file integrity monitoring. Entities use it to ensure compliance, monitor network activities, and prevent threats such as ransomware. Integration and setup are straightforward, enhancing its flexibility for centralized log collection and analysis. While the tool is effective, improvements are needed in performance scaling, interface updates from Flash, and enhanced customization and reporting options.

What are the key features of SolarWinds Security Event Manager?

Log Monitoring: Tracks and analyzes log files for security events.
File Integrity Monitoring: Detects unauthorized changes in files.
Reporting and Alerts: Provides extensive reporting with timely security alerts.
Compliance Maintenance: Assists in maintaining compliance with audit standards.
User-Friendly Interface: Features intuitive navigation and versatile integration capabilities.

What benefits should users consider when evaluating SolarWinds Security Event Manager?

Ease of Use: Intuitive setup and navigation simplify user experience.
Security Enhancements: Strong monitoring helps detect and prevent ransomware threats.
Compliance Support: Ensures compliance with audit requirements, facilitating regulatory adherence.
Integration: Seamlessly connects with other tools for centralized data management.

Industries such as financial services, healthcare, and government often implement SolarWinds Security Event Manager to monitor sensitive information, ensure adherence to regulatory compliance, and manage network security efficiently. The tool's ability to analyze logs and prevent threats makes it valuable for businesses needing robust security event management.

SolarWinds

Sample Customers

United States Air Force, Rubrik, SentinelOne, Critical Start, NHL, Panda Security, Telefonica, CaixaBank, OpenText, IGT, OneMain Financial, SurveyMonkey, FanDuel, H&R Block, Ulta Beauty, Manulife, Moneylion, Chime Bank, Magna International, American Express Global Business Travel

NetSuite, EasyStreet, Legacy Texas Bank, and Energy Federal Credit Union, to name a few.

Buyer's Guide

Devo vs. SolarWinds Security Event Manager

November 2026

Free Report: Devo vs. SolarWinds Security Event Manager

Find out what your peers are saying about Devo vs. SolarWinds Security Event Manager and other solutions. Updated: November 2026.

DOWNLOAD NOW

921,749 professionals have used our research since 2012.

See our Devo vs. SolarWinds Security Event Manager report.

See our list of best Security Information and Event Management (SIEM) vendors.

We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.