Devo vs SolarWinds Security Event Manager comparison

Devo and SolarWinds are both solutions in the Security Information and Event Management (SIEM) category. Devo is ranked #26 with an average rating of 8.0, while SolarWinds is ranked #34 with an average rating of 7.7. Devo holds a 1.2% mindshare in SIEM, compared to SolarWinds’s 1.0% mindshare. Additionally, 95% of Devo users are willing to recommend the solution, compared to 82% of SolarWinds users who would recommend it.

Devo

Read 24 Devo reviews

5,226 Views
3,031 Comparison Views

95% willing to recommend

SolarWinds Security Event M...

Read 27 SolarWinds Security Event Manager reviews

2,692 Views
2,584 Comparison Views

82% willing to recommend

Devo

SolarWinds Security Event M...

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 18, 2024

SolarWinds Security Event Manager and Devo are widely used in the security event management sector. Devo has the upper hand due to its advanced features and scalability.

Features: SolarWinds Security Event Manager is praised for its log management, real-time event correlation, and compliance reporting. Devo is valued for its scalability, advanced analytics, and integration capabilities.

Room for Improvement: Users of SolarWinds Security Event Manager indicate that its performance can be affected under heavy loads and often request more integration options. Devo users point to the need for a more intuitive navigation process and better initial setup support.

Ease of Deployment and Customer Service: SolarWinds Security Event Manager is noted for its straightforward deployment but receives mixed feedback on customer service response times. Devo's deployment process is complex but benefits from responsive and efficient customer service.

Pricing and ROI: SolarWinds Security Event Manager is favored for its competitive pricing and good return on investment. Devo, despite its higher cost, is considered worth the price due to its comprehensive features and high ROI.

To learn more, read our detailed Devo vs. SolarWinds Security Event Manager Report (Updated: April 2026).

Buyer's Guide

Devo vs. SolarWinds Security Event Manager

April 2026

Download the complete report

Helped 896,467 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Devo

Ranking in Security Information and Event Management (SIEM)

26th

Average Rating

8.4

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Log Management (27th), IT Operations Analytics (7th), AIOps (19th)

SolarWinds Security Event M...

Ranking in Security Information and Event Management (SIEM)

34th

Average Rating

7.8

Reviews Sentiment

5.7

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of May 2026, in the Security Information and Event Management (SIEM) category, the mindshare of Devo is 1.2%, up from 1.0% compared to the previous year. The mindshare of SolarWinds Security Event Manager is 1.0%, up from 0.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Security Information and Event Management (SIEM) Mindshare Distribution
Product	Mindshare (%)
Devo	1.2%
SolarWinds Security Event Manager	1.0%
Other	97.8%

Security Information and Event Management (SIEM)

Featured Reviews

Francisco JavierRomo

Strategic Account Executive at a computer software company with 51-200 employees

Has improved investigative workflows with interactive dashboards and simplified data correlation

The data analytics cloud component focuses on real-time analytics, which is very impressive. The SIEM collects and correlates logs data from different sources and can integrate with ServiceNow, hardware asset management, and software asset management. The security orchestration, automation, and response (SOAR) is another valuable feature. The security data platform serves as the foundation of Devo. Regarding advanced query capabilities, Devo offers several models including query logs, visual query builder, language integrated query, and SQL, with SQL being the most frequently used querying data capability. The single pane of glass that Devo offers is the SOC. The tools in Devo's active ports are for investigating, not just viewing data. They are more interactive than other market solutions. The drill-down reports capabilities allow analysts to click on any element in a widget. When they see a spike in a line chart for a failed login, which could be a true or false attempt, they can click that spike, and a table widget on the same active board instantly populates with raw logs of data for those specific failed logins. This is particularly important for enterprise companies with numerous endpoints and users. The dynamic filtering of inputs significantly reduces the time cybersecurity analysts spend trying to figure out failed logins and identifying false positives.

Read full review

Yashokanth Partkunan

Managed Services Engineer at Loop1 Systems

Has supported client needs efficiently but requires deeper analysis features and faster support

The log analyzing capability of SolarWinds Security Event Manager should go into more depth than the current environment. More modification and enhancements are required on the dashboard side in order to make it closer to optimal performance. From observation and feedback from users, they need more functionality related to monitoring, and in-depth analyzing needs to be improved.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"I'm so happy with the platform."

"Those 400 days of hot data mean that people can look for trends and at what happened in the past. And they can not only do so from a security point of view, but even for operational use cases. In the past, our operational norm was to keep live data for only 30 days. Our users were constantly asking us for at least 90 days, and we really couldn't even do that. That's one reason that having 400 days of live data is pretty huge. As our users start to use it and adopt this system, we expect people to be able to do those long-term analytics."

"Overall, using Devo has saved us time when compared to our previous security solutions, and I estimate that it took us 10 times longer to achieve the same thing without Devo."

"Devo provides good value and, given the quality of the product, I would expect to pay more."

"The alerting is much better than I anticipated. We don't get as many alerts as I thought we would, but that nobody's fault, it's just the way it is."

"The drill-down reports capabilities allow analysts to click on any element in a widget. When they see a spike in a line chart for a failed login, which could be a true or false attempt, they can click that spike, and a table widget on the same active board instantly populates with raw logs of data for those specific failed logins."

"Scalability is one of Devo's strengths."

"Devo has improved our visibility, log management efficiency, and investigation capabilities positively."

More Devo pros

"The File Integrity Monitoring is great, giving you visibility into who has changed a file, when that file was changed, and more, with easy out-of-the-box reporting and customization for reports and alerts that help maintain compliance and security."

"User-friendly configuration is key, and the configurations are simple, not complex."

"The most valuable feature of SolarWinds Security Event Manager is the analysis and the knowledge about the incidence that we trace."

"SolarWinds is one of the products that I use, amongst many others, to fit the needs of our customers which includes their budget, size, and industry."

"Some of the rules are most valuable because you can be notified about various things, such as spyware or things that are going on in the internal network."

"It has in-depth monitoring capabilities and an easy way for setting up dashboards."

"We did previously use a different solution, but SolarWinds is much better; it's easy to interact with SolarWinds, easy to operate, easy to configure, and generally easier compared to what we were working with before."

"We did previously use a different solution, but SolarWinds is much better. It's easy to interact with SolarWinds. It's easy to operate, easy to configure and is generally easier compared to what we were working with before."

More SolarWinds Security Event Manager pros

Cons

"The Activeboards feature is not as mature regarding the look and feel. Its functionality is mature, but the look and feel is not there. For example, if you have some data sets and are trying to get some graphics, you cannot change anything. There's just one format for the graphics. You cannot change the size of the font, the font itself, etc."

"There's always room to reduce the learning curve over how to deal with events and machine data."

"Some basic reporting mechanisms have room for improvement. Customers can do analysis by building Activeboards, Devo’s name for interactive dashboards. This capability is quite nice, but it is not a reporting engine. Devo does provide mechanisms to allow third-party tools to query data via their API, which is great. However, a lot of folks like or want a reporting engine, per se, and Devo simply doesn't have that. This may or may not be by design."

"From our experience, the Devo agent needs some work. They built it on top of OS Query's open-source framework, and it seems like it wasn't tuned properly to handle a large volume of Windows event logs."

"There's always room to reduce the learning curve over how to deal with events and machine data. They could make the machine data simpler."

"Technical support could be better."

"I would like to have the ability to create more complex dashboards."

"The tools in Devo's active ports need enhancement in their investigative capabilities."

More Devo cons

"The log analyzing capability of SolarWinds Security Event Manager should go into more depth than the current environment."

"There is no correlation made between log entries, so no threat information is presented."

"Training for this solution needs to be improved, as new employees are sometimes unfamiliar with the product."

"Under the new system, it is not upgradable the way they say. When you try to do an upgrade, it doesn't really work unless you dump everything and start from scratch. You lose a lot of your nodes. Whenever you set your nodes up and everything else, they don't want to bring those nodes back in, so you have to really go back and restructure all your nodes. I went from version 6.5 to version 6.6 and then to version 6.7. I then went to version 2019, and now it is version 2020. It would be good if we can upgrade without having to delete everything and start from scratch. They can maybe build more KPIs and other things for the dashboard. Some of the other systems already have built-in KPIs. SolarWinds is starting to catch up, but it is not there yet. They can include some of the business or industry standards for tracking the time, that is, the meantime to detect (MTTD) and the meantime to resolve (MTTR). They can also find a way to build a KPI that measures the number of instances of port scans experienced in a week or a month."

"The product should improve the ease with which you can create event alerts. They are not as hard now but you need to have an easier way."

"I would like to be able to dig deeper into the visibility of events or incidents to determine whether they are malicious, such as by doing behavior analysis."

"I would like to have a more customizable dashboard."

"There is no correlation made between log entries, so no threat information is presented."

More SolarWinds Security Event Manager cons

Pricing and Cost Advice

"I like the pricing very much. They keep it simple. It is a single price based on data ingested, and they do it on an average. If you get a spike of data that flows in, they will not stick it to you or charge you for that. They are very fair about that."

"Devo is a hosted or subscription-based solution, whereas before, we purchased QRadar, so we owned it and just had to pay a maintenance fee. We've encountered this with some other products, too, where we went over to subscription-based. Our thought process is that with subscription based, the provider hosts and maintains the tool, and it's offsite. That comes with some additional fees, but we were able to convince our upper management it was worth the price. We used to pay under 10k a year for maintenance, and now we're paying ten times that. It was a relatively tough sell to our management, but I wonder if we have a choice anymore; this is where the market is."

"I rate the pricing a four on a scale of one to ten, where one is cheap, and ten is expensive."

"It's a per gigabyte cost for ingestion of data. For every gigabyte that you ingest, it's whatever you negotiated your price for. Compared to other contracts that we've had for cloud providers, it's significantly less."

"We have an OEM agreement with Devo. It is very similar to the standard licensing agreement because we are charged in the same way as any other customer, e.g., we use the backroom."

"Devo was very cost-competitive... Devo did come with that 400 days of hot data, and that was not the case with other products."

"I'm not involved in the financial aspect, but I think the licensing costs are similar to other solutions. If all the solutions have a similar cost, Devo provides more for the money."

"Pricing is based on the number of gigabytes of ingestion by volume, and it's on a 30-day average. If you go over one day, that's not a big deal as long as the average is what you expected it to be."

More Devo pricing and cost advice

"We do a yearly license renewal. For a year, the solution costs roughly $500,000 USD. There are no costs beyond this yearly fee."

"The pricing model would benefit from having package deals with other SolarWinds products."

"The tool is available at a good price for customers compared to other solutions in the market. I rate the product's price as an eight out of ten."

"The price of SolarWinds Security Event Manager is reasonable."

"Licensing is on devices, so if you have many, then this may be high."

"It is in the appropriate mid-range. It is not as expensive as some of the other solutions. It is also not cheap."

"Licenses can only be purchased in blocks of fifty at a time."

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

896,467 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

13%

Construction Company

Computer Software Company

Outsourcing Company

Financial Services Firm

14%

Manufacturing Company

10%

Construction Company

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	9
Midsize Enterprise	4
Large Enterprise	12

By reviewers
Company Size	Count
Small Business	19
Midsize Enterprise	3
Large Enterprise	7

Questions from the Community

What is your experience regarding pricing and costs for Devo?

Compared to Splunk or SentinelOne, it is really expensive. I rate the product’s pricing a nine out of ten, where one is cheap and ten is expensive.

See all answers

What needs improvement with Devo?

The single pane of glass that Devo offers could be improved. The tools in Devo's active ports need enhancement in their investigative capabilities. The drill-down reports capabilities, while useful...

See all answers

What is your primary use case for Devo?

During my time at MetaBase Q and as a partner integrator of ServiceNow, I had the chance to understand and be part of projects integrating SOCs, NOCs, and Security Operation Centers with Devo. Most...

See all answers

What is your experience regarding pricing and costs for SolarWinds Security Event Manager ?

The tool is available at a good price for customers compared to other solutions in the market. I rate the product's price as an eight out of ten.

See all answers

What needs improvement with SolarWinds Security Event Manager ?

See all answers

What is your primary use case for SolarWinds Security Event Manager ?

I work with all SolarWinds products mostly, including Network Configuration Manager and NPM. I am a reseller. I usually recommend SolarWinds products for Loop1. It's for the bigger ones; we are the...

See all answers

Comparisons

LogRhythm SIEM vs Devo

Compared 8% of the time

Splunk Enterprise Security vs Devo

Compared 7% of the time

New Relic vs Devo

Compared 4% of the time

IBM Security QRadar vs Devo

Compared 3% of the time

Elastic Security vs Devo

Compared 3% of the time

More Devo Competitors

Splunk Enterprise Security vs SolarWinds Security Event Manager

Compared 11% of the time

IBM Security QRadar vs SolarWinds Security Event Manager

Compared 8% of the time

ManageEngine Log360 vs SolarWinds Security Event Manager

Compared 5% of the time

Wazuh vs SolarWinds Security Event Manager

Compared 5% of the time

Coralogix vs SolarWinds Security Event Manager

Compared 4% of the time

More SolarWinds Security Event Manager Competitors

Product Reports

Buyer's Guide

Devo

May 2026

Download Devo product report

Buyer's Guide

SolarWinds Security Event Manager

May 2026

SolarWinds Security Event Manager report

Download SolarWinds Security Event Manager product report

Also Known As

No data available

SolarWinds LEM, Solarwinds SIEM, TriGeo, Log and Event Manager

Overview

Devo offers powerful visual analytics, real-time data querying, and log integration capabilities within a cloud-native, multi-tenant architecture, supporting extended data retention ideal for long-term analysis and compliance.

Devo is recognized for its Activeboards, which facilitate visual analytics. High-speed search capabilities and real-time analytics enable efficient data manipulation and querying. Its multi-tenant architecture supports effective data segregation and customization tailored to distinct business needs, enhancing its value for handling complex log integrations. With extended data retention of 400 days and a cloud-native architecture, Devo is a robust platform for long-term analysis and compliance requirements. Though opportunities exist to improve browser stability on large searches, SOAR integrations, and its parser capabilities, Devo remains essential for incident response and security monitoring, offering centralized data storage and analysis.

What are Devo's most important features?

Activeboards: Facilitate visual analytics and data exploration.
High-Speed Search: Enables fast data querying and manipulation.
Real-Time Analytics: Supports instant insights and decision-making.
Multi-Tenant Architecture: Allows effective data segregation and customization.
Extended Data Retention: Offers 400-day log retention for compliance and analysis.
Complex Log Integration: Handles intricate data sources effortlessly.

What benefits and ROI should organizations look for in reviews?

Visual Insights: Enhance understanding through interactive dashboards.
Performance Efficiency: Saves time with high-speed data search and real-time results.
Customization Flexibility: Fits specific business requirements with multi-tenant architecture.
Long-Term Compliance: Ensures alignment with extended data retention needs.
Centralized Monitoring: Enables comprehensive incident response and security monitoring.

Devo is extensively used in industries focused on incident response and digital forensics, centralizing data for security monitoring across hybrid environments. Organizations benefit from its ability to store and analyze aggregated logs, creating alerts and dashboards to enhance visibility for network and endpoint activities in multi-domain settings.

Devo

SolarWinds Security Event Manager is recognized for its ease of use, offering efficient log monitoring and a user-friendly interface. The tool supports a range of monitoring functions and provides strong security capabilities across platform configurations.

Designed for comprehensive log analysis and security event monitoring, SolarWinds Security Event Manager provides robust reporting, timely alerts, and supports file integrity monitoring. Entities use it to ensure compliance, monitor network activities, and prevent threats such as ransomware. Integration and setup are straightforward, enhancing its flexibility for centralized log collection and analysis. While the tool is effective, improvements are needed in performance scaling, interface updates from Flash, and enhanced customization and reporting options.

What are the key features of SolarWinds Security Event Manager?

Log Monitoring: Tracks and analyzes log files for security events.
File Integrity Monitoring: Detects unauthorized changes in files.
Reporting and Alerts: Provides extensive reporting with timely security alerts.
Compliance Maintenance: Assists in maintaining compliance with audit standards.
User-Friendly Interface: Features intuitive navigation and versatile integration capabilities.

What benefits should users consider when evaluating SolarWinds Security Event Manager?

Ease of Use: Intuitive setup and navigation simplify user experience.
Security Enhancements: Strong monitoring helps detect and prevent ransomware threats.
Compliance Support: Ensures compliance with audit requirements, facilitating regulatory adherence.
Integration: Seamlessly connects with other tools for centralized data management.

Industries such as financial services, healthcare, and government often implement SolarWinds Security Event Manager to monitor sensitive information, ensure adherence to regulatory compliance, and manage network security efficiently. The tool's ability to analyze logs and prevent threats makes it valuable for businesses needing robust security event management.

SolarWinds

Sample Customers

United States Air Force, Rubrik, SentinelOne, Critical Start, NHL, Panda Security, Telefonica, CaixaBank, OpenText, IGT, OneMain Financial, SurveyMonkey, FanDuel, H&R Block, Ulta Beauty, Manulife, Moneylion, Chime Bank, Magna International, American Express Global Business Travel

NetSuite, EasyStreet, Legacy Texas Bank, and Energy Federal Credit Union, to name a few.

Buyer's Guide

Devo vs. SolarWinds Security Event Manager

April 2026

Free Report: Devo vs. SolarWinds Security Event Manager

Find out what your peers are saying about Devo vs. SolarWinds Security Event Manager and other solutions. Updated: April 2026.

DOWNLOAD NOW

896,467 professionals have used our research since 2012.

See our Devo vs. SolarWinds Security Event Manager report.

See our list of best Security Information and Event Management (SIEM) vendors.

We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.