Devo vs SolarWinds Security Event Manager comparison

Devo and SolarWinds are both solutions in the Security Information and Event Management (SIEM) category. Devo is ranked #28 with an average rating of 8.0, while SolarWinds is ranked #33 with an average rating of 7.7. Devo holds a 1.2% mindshare in SIEM, compared to SolarWinds’s 1.0% mindshare. Additionally, 91% of Devo users are willing to recommend the solution, compared to 82% of SolarWinds users who would recommend it.

Devo

Read 25 Devo reviews

5,955 Views
3,335 Comparison Views

91% willing to recommend

SolarWinds Security Event M...

Read 27 SolarWinds Security Event Manager reviews

3,049 Views
2,927 Comparison Views

82% willing to recommend

Devo

SolarWinds Security Event M...

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 18, 2024

SolarWinds Security Event Manager and Devo are widely used in the security event management sector. Devo has the upper hand due to its advanced features and scalability.

Features: SolarWinds Security Event Manager is praised for its log management, real-time event correlation, and compliance reporting. Devo is valued for its scalability, advanced analytics, and integration capabilities.

Room for Improvement: Users of SolarWinds Security Event Manager indicate that its performance can be affected under heavy loads and often request more integration options. Devo users point to the need for a more intuitive navigation process and better initial setup support.

Ease of Deployment and Customer Service: SolarWinds Security Event Manager is noted for its straightforward deployment but receives mixed feedback on customer service response times. Devo's deployment process is complex but benefits from responsive and efficient customer service.

Pricing and ROI: SolarWinds Security Event Manager is favored for its competitive pricing and good return on investment. Devo, despite its higher cost, is considered worth the price due to its comprehensive features and high ROI.

To learn more, read our detailed Devo vs. SolarWinds Security Event Manager Report (Updated: June 2026).

Buyer's Guide

Devo vs. SolarWinds Security Event Manager

June 2026

Download the complete report

Helped 902,417 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Devo

Ranking in Security Information and Event Management (SIEM)

28th

Average Rating

8.4

Reviews Sentiment

6.6

Number of Reviews

Ranking in other categories

Log Management (26th), IT Operations Analytics (9th), AIOps (18th)

SolarWinds Security Event M...

Ranking in Security Information and Event Management (SIEM)

33rd

Average Rating

7.8

Reviews Sentiment

5.7

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of June 2026, in the Security Information and Event Management (SIEM) category, the mindshare of Devo is 1.2%, up from 1.1% compared to the previous year. The mindshare of SolarWinds Security Event Manager is 1.0%, up from 0.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Security Information and Event Management (SIEM) Mindshare Distribution
Product	Mindshare (%)
Devo	1.2%
SolarWinds Security Event Manager	1.0%
Other	97.8%

Security Information and Event Management (SIEM)

Featured Reviews

Francisco JavierRomo

Strategic Account Executive at a computer software company with 51-200 employees

Has improved investigative workflows with interactive dashboards and simplified data correlation

The data analytics cloud component focuses on real-time analytics, which is very impressive. The SIEM collects and correlates logs data from different sources and can integrate with ServiceNow, hardware asset management, and software asset management. The security orchestration, automation, and response (SOAR) is another valuable feature. The security data platform serves as the foundation of Devo. Regarding advanced query capabilities, Devo offers several models including query logs, visual query builder, language integrated query, and SQL, with SQL being the most frequently used querying data capability. The single pane of glass that Devo offers is the SOC. The tools in Devo's active ports are for investigating, not just viewing data. They are more interactive than other market solutions. The drill-down reports capabilities allow analysts to click on any element in a widget. When they see a spike in a line chart for a failed login, which could be a true or false attempt, they can click that spike, and a table widget on the same active board instantly populates with raw logs of data for those specific failed logins. This is particularly important for enterprise companies with numerous endpoints and users. The dynamic filtering of inputs significantly reduces the time cybersecurity analysts spend trying to figure out failed logins and identifying false positives.

Read full review

Yashokanth Partkunan

Managed Services Engineer at Loop1 Systems

Has supported client needs efficiently but requires deeper analysis features and faster support

The log analyzing capability of SolarWinds Security Event Manager should go into more depth than the current environment. More modification and enhancements are required on the dashboard side in order to make it closer to optimal performance. From observation and feedback from users, they need more functionality related to monitoring, and in-depth analyzing needs to be improved.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Overall, using Devo has saved us time when compared to our previous security solutions, and I estimate that it took us 10 times longer to achieve the same thing without Devo."

"One of the immediate improvements that come to mind is the amount of hot, searchable data, as in the SIEM we had before we were only able to search back 90 days of hot, searchable data, whereas here we have 400 days worth, which has definitely improved our threat hunting capabilities."

"The thing that Devo does better than other solutions is to give me the ability to write queries that look at multiple data sources and run fast. Most SIEMs don't do that. And I can do that by creating entity-based queries. Let's say I have a table which has Okta, a table which has G Suite, a table which has endpoint telemetry, and I have a table which has DNS telemetry. I can write a query that says, 'Join all these things together on IP, and where the IP matches in all these tables, return to me that subset of data, within these time windows.' I can break it down that way."

"The user interface is really modern. As an end-user, there are a lot of possibilities to tailor the platform to your needs, and that can be done without needing much support from Devo. It's really flexible and modular. The UI is very clean."

"It's very, very versatile."

"It's a core tool for us in looking at logs, because logs are the starting point in any investigation, so leveraging Devo from start to finish in any investigation is basically what we do."

"Devo's speed and performance allows us to query in real-time and keep up with what is actually happening on the network, then respond effectively to events."

"The most useful feature for us, because of some of the issues we had previously, was the simplicity of log integrations. It's much easier with this platform to integrate log sources that might not have standard logging and things like that."

More Devo pros

"The most valuable feature of the solution is intuitivity of navigation; it's easy to build rules and actions which are based on the logs and event types we collect with the software."

"SolarWinds is one of the products that I use, amongst many others, to fit the needs of our customers which includes their budget, size, and industry."

"The graphical user interface is very user-friendly. SolarWinds is a hybrid solution so you can use it across many platforms."

"It performs network behavior monitoring, log monitoring, and disaster recovery monitoring."

"We had to integrate with other teams, and the infrastructure deployment didn't take long. The integration involves learning with different teams, networking, and configuring various network devices and servers. Infrastructure deployment only took one or two days."

"If you have no monitoring tool in place, SolarWinds SIEM is a good place to start and very inexpensive."

"We did previously use a different solution, but SolarWinds is much better. It's easy to interact with SolarWinds. It's easy to operate, easy to configure and is generally easier compared to what we were working with before."

"The solution helps you monitor database instances, application instances, other customer application things, Linux servers, IBM servers, and Oracle servers."

More SolarWinds Security Event Manager pros

Cons

"The price is one problem with Devo."

"The biggest area with room for improvement in Devo is the Security Operations module that just isn't there yet."

"There is room for improvement in the ability to parse different log types. I would go as far as to say the product is deficient in its ability to parse multiple, different log types, including logs from major vendors that are supported by competitors. Additionally, the time that it takes to turn around a supported parser for customers and common log source types, which are generally accepted standards in the industry, is not acceptable. This has impacted customer onboarding and customer relationships for us on multiple fronts."

"Some basic reporting mechanisms have room for improvement. Customers can do analysis by building Activeboards, Devo’s name for interactive dashboards. This capability is quite nice, but it is not a reporting engine. Devo does provide mechanisms to allow third-party tools to query data via their API, which is great. However, a lot of folks like or want a reporting engine, per se, and Devo simply doesn't have that. This may or may not be by design."

"There are some issues from an availability and functionality standpoint, meaning the tool is somewhat slow. There were some slow response periods over the past six to nine months, though it has yet to impact us terribly as we are a relatively small shop. We've noticed it, however, so Devo could improve the responsiveness."

"There's room for improvement within the GUI. There is also some room for improvement within the native parsers they support. But I can say that about pretty much any solution in this space."

"The tools in Devo's active ports need enhancement in their investigative capabilities."

"The Activeboards feature is not as mature regarding the look and feel."

More Devo cons

"Training for this solution needs to be improved, as new employees are sometimes unfamiliar with the product."

"There is no correlation made between log entries, so no threat information is presented."

"It is a very technical program. They can simplify it so that it isn't so hard to deal with."

"Under the new system, it is not upgradable the way they say. When you try to do an upgrade, it doesn't really work unless you dump everything and start from scratch."

"I imagine we will have to develop our own reports soon, this seems to be more cumbersome."

"There are no multiple dashboards which would allow you to see information side-by-side."

"The log analyzing capability of SolarWinds Security Event Manager should go into more depth than the current environment."

"SolarWinds should improve its correlation capabilities. The correlation does not automatically detect and reduce the events fast enough. You have to manually do a correlation report, which means the tool is not scalable in many ways."

More SolarWinds Security Event Manager cons

Pricing and Cost Advice

"Be cautious of metadata inclusion for log types in pricing, as there are some "gotchas" with that."

"Our licensing fees are billed annually and per terabyte."

"[Devo was] in the ballpark with at least a couple of the other front-runners that we were looking at. Devo is a good value and, given the quality of the product, I would expect to pay more."

"It's a per gigabyte cost for ingestion of data. For every gigabyte that you ingest, it's whatever you negotiated your price for. Compared to other contracts that we've had for cloud providers, it's significantly less."

"I'm not involved in the financial aspect, but I think the licensing costs are similar to other solutions. If all the solutions have a similar cost, Devo provides more for the money."

"The way Devo prices things is based on the amount of data, and I wish the tiers had more granularity. Maybe at this point they do, but when we first negotiated with them, there were only three or four tiers."

"Devo is a hosted or subscription-based solution, whereas before, we purchased QRadar, so we owned it and just had to pay a maintenance fee. We've encountered this with some other products, too, where we went over to subscription-based. Our thought process is that with subscription based, the provider hosts and maintains the tool, and it's offsite. That comes with some additional fees, but we were able to convince our upper management it was worth the price. We used to pay under 10k a year for maintenance, and now we're paying ten times that. It was a relatively tough sell to our management, but I wonder if we have a choice anymore; this is where the market is."

"I rate the pricing a four on a scale of one to ten, where one is cheap, and ten is expensive."

More Devo pricing and cost advice

"The pricing model would benefit from having package deals with other SolarWinds products."

"We do a yearly license renewal. For a year, the solution costs roughly $500,000 USD. There are no costs beyond this yearly fee."

"Licenses can only be purchased in blocks of fifty at a time."

"The price of SolarWinds Security Event Manager is reasonable."

"The tool is available at a good price for customers compared to other solutions in the market. I rate the product's price as an eight out of ten."

"Licensing is on devices, so if you have many, then this may be high."

"It is in the appropriate mid-range. It is not as expensive as some of the other solutions. It is also not cheap."

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

902,417 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

13%

Construction Company

10%

Manufacturing Company

Computer Software Company

Financial Services Firm

14%

Construction Company

13%

Manufacturing Company

11%

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	9
Midsize Enterprise	5
Large Enterprise	12

By reviewers
Company Size	Count
Small Business	19
Midsize Enterprise	3
Large Enterprise	7

Questions from the Community

What is your experience regarding pricing and costs for Devo?

Pricing generally depends on the scale, data ingestion requirements, and integrations for what the enterprise monitoring needs. I have not been part of the procurement process, so I am not aware of...

See all answers

What needs improvement with Devo?

One improvement area for Devo could be simplifying some configuration and improving the onboarding for new analysts because it is quite complex for fresher or new analysts who are handling Devo.UI ...

See all answers

What is your primary use case for Devo?

Devo serves as our centralized log monitoring, threat investigation, alert monitoring, and security analytics platform. We use it to collect logs from multiple systems so we can correlate the event...

See all answers

What is your experience regarding pricing and costs for SolarWinds Security Event Manager ?

The tool is available at a good price for customers compared to other solutions in the market. I rate the product's price as an eight out of ten.

See all answers

What needs improvement with SolarWinds Security Event Manager ?

See all answers

What is your primary use case for SolarWinds Security Event Manager ?

I work with all SolarWinds products mostly, including Network Configuration Manager and NPM. I am a reseller. I usually recommend SolarWinds products for Loop1. It's for the bigger ones; we are the...

See all answers

Comparisons

LogRhythm SIEM vs Devo

Compared 8% of the time

Splunk Enterprise Security vs Devo

Compared 7% of the time

New Relic vs Devo

Compared 4% of the time

IBM Security QRadar vs Devo

Compared 3% of the time

Microsoft Sentinel vs Devo

Compared 3% of the time

More Devo Competitors

Splunk Enterprise Security vs SolarWinds Security Event Manager

Compared 10% of the time

IBM Security QRadar vs SolarWinds Security Event Manager

Compared 8% of the time

ManageEngine Log360 vs SolarWinds Security Event Manager

Compared 5% of the time

Sumo Logic Security vs SolarWinds Security Event Manager

Compared 5% of the time

Wazuh vs SolarWinds Security Event Manager

Compared 4% of the time

More SolarWinds Security Event Manager Competitors

Product Reports

Buyer's Guide

Devo

June 2026

Download Devo product report

Buyer's Guide

SolarWinds Security Event Manager

May 2026

SolarWinds Security Event Manager report

Download SolarWinds Security Event Manager product report

Also Known As

No data available

SolarWinds LEM, Solarwinds SIEM, TriGeo, Log and Event Manager

Overview

Devo offers powerful visual analytics, real-time data querying, and log integration capabilities within a cloud-native, multi-tenant architecture, supporting extended data retention ideal for long-term analysis and compliance.

Devo is recognized for its Activeboards, which facilitate visual analytics. High-speed search capabilities and real-time analytics enable efficient data manipulation and querying. Its multi-tenant architecture supports effective data segregation and customization tailored to distinct business needs, enhancing its value for handling complex log integrations. With extended data retention of 400 days and a cloud-native architecture, Devo is a robust platform for long-term analysis and compliance requirements. Though opportunities exist to improve browser stability on large searches, SOAR integrations, and its parser capabilities, Devo remains essential for incident response and security monitoring, offering centralized data storage and analysis.

What are Devo's most important features?

Activeboards: Facilitate visual analytics and data exploration.
High-Speed Search: Enables fast data querying and manipulation.
Real-Time Analytics: Supports instant insights and decision-making.
Multi-Tenant Architecture: Allows effective data segregation and customization.
Extended Data Retention: Offers 400-day log retention for compliance and analysis.
Complex Log Integration: Handles intricate data sources effortlessly.

What benefits and ROI should organizations look for in reviews?

Visual Insights: Enhance understanding through interactive dashboards.
Performance Efficiency: Saves time with high-speed data search and real-time results.
Customization Flexibility: Fits specific business requirements with multi-tenant architecture.
Long-Term Compliance: Ensures alignment with extended data retention needs.
Centralized Monitoring: Enables comprehensive incident response and security monitoring.

Devo is extensively used in industries focused on incident response and digital forensics, centralizing data for security monitoring across hybrid environments. Organizations benefit from its ability to store and analyze aggregated logs, creating alerts and dashboards to enhance visibility for network and endpoint activities in multi-domain settings.

Devo

SolarWinds Security Event Manager is recognized for its ease of use, offering efficient log monitoring and a user-friendly interface. The tool supports a range of monitoring functions and provides strong security capabilities across platform configurations.

Designed for comprehensive log analysis and security event monitoring, SolarWinds Security Event Manager provides robust reporting, timely alerts, and supports file integrity monitoring. Entities use it to ensure compliance, monitor network activities, and prevent threats such as ransomware. Integration and setup are straightforward, enhancing its flexibility for centralized log collection and analysis. While the tool is effective, improvements are needed in performance scaling, interface updates from Flash, and enhanced customization and reporting options.

What are the key features of SolarWinds Security Event Manager?

Log Monitoring: Tracks and analyzes log files for security events.
File Integrity Monitoring: Detects unauthorized changes in files.
Reporting and Alerts: Provides extensive reporting with timely security alerts.
Compliance Maintenance: Assists in maintaining compliance with audit standards.
User-Friendly Interface: Features intuitive navigation and versatile integration capabilities.

What benefits should users consider when evaluating SolarWinds Security Event Manager?

Ease of Use: Intuitive setup and navigation simplify user experience.
Security Enhancements: Strong monitoring helps detect and prevent ransomware threats.
Compliance Support: Ensures compliance with audit requirements, facilitating regulatory adherence.
Integration: Seamlessly connects with other tools for centralized data management.

Industries such as financial services, healthcare, and government often implement SolarWinds Security Event Manager to monitor sensitive information, ensure adherence to regulatory compliance, and manage network security efficiently. The tool's ability to analyze logs and prevent threats makes it valuable for businesses needing robust security event management.

SolarWinds

Sample Customers

United States Air Force, Rubrik, SentinelOne, Critical Start, NHL, Panda Security, Telefonica, CaixaBank, OpenText, IGT, OneMain Financial, SurveyMonkey, FanDuel, H&R Block, Ulta Beauty, Manulife, Moneylion, Chime Bank, Magna International, American Express Global Business Travel

NetSuite, EasyStreet, Legacy Texas Bank, and Energy Federal Credit Union, to name a few.

Buyer's Guide

Devo vs. SolarWinds Security Event Manager

June 2026

Free Report: Devo vs. SolarWinds Security Event Manager

Find out what your peers are saying about Devo vs. SolarWinds Security Event Manager and other solutions. Updated: June 2026.

DOWNLOAD NOW

902,417 professionals have used our research since 2012.

See our Devo vs. SolarWinds Security Event Manager report.

See our list of best Security Information and Event Management (SIEM) vendors.

We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.