ConnectWise SIEM vs Devo comparison

Read 30 Devo reviews

8,527 Views
4,519 Comparison Views

93% willing to recommend

ConnectWise SIEM

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 18, 2024

Devo and ConnectWise SIEM are two competitive products in the SIEM market. Users are generally happier with Devo's pricing and support, while ConnectWise SIEM offers superior features and justifies its cost.

Features: Devo is praised for robust analytics, seamless integration, and advanced threat detection capabilities. ConnectWise SIEM excels in comprehensive monitoring, automated incident responses, and detailed reporting. While both products offer valuable features, ConnectWise SIEM tends to have a slight edge due to extensive monitoring and automation.

Room for Improvement: Devo users highlight the need for improved reporting capabilities, better scalability options, and enhanced user-friendliness. ConnectWise SIEM users point out a more intuitive design, improved user training resources, and reduced complexity for setup. Although both products need improvements, Devo's reporting limitations are more frequently mentioned.

Ease of Deployment and Customer Service: Devo offers a relatively quick deployment process and strong customer support. ConnectWise SIEM requires a more complex setup but provides detailed documentation and responsive support. Despite the complexity, ConnectWise SIEM users value the quality of customer service and resources available.

Pricing and ROI: Devo users report a favorable setup cost and positive return on investment, appreciating the pricing structure. ConnectWise SIEM, though perceived as more expensive, justifies its cost with comprehensive features and reliable performance. Users feel the higher price yields substantial ROI through its advanced capabilities.

To learn more, read our detailed ConnectWise SIEM vs. Devo Report (Updated: September 2026).

ConnectWise SIEM vs. Devo

September 2026

Download the complete report

Helped 920,769 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

ConnectWise SIEM

Ranking in Security Information and Event Management (SIEM)

45th

Average Rating

8.6

Reviews Sentiment

6.6

Number of Reviews

Ranking in other categories

Endpoint Detection and Response (EDR) (52nd), Secure Access Service Edge (SASE) (21st), Managed Detection and Response (MDR) (24th)

Devo

Ranking in Security Information and Event Management (SIEM)

16th

Average Rating

8.2

Reviews Sentiment

6.5

Number of Reviews

Ranking in other categories

Log Management (21st), IT Operations Analytics (7th), AIOps (17th)

Mindshare comparison

As of November 2026, in the Security Information and Event Management (SIEM) category, the mindshare of ConnectWise SIEM is 0.7%, up from 0.5% compared to the previous year. The mindshare of Devo is 1.2%, up from 1.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Security Information and Event Management (SIEM) Mindshare Distribution
Product	Mindshare (%)
Devo	1.2%
ConnectWise SIEM	0.7%
Other	98.1%

Security Information and Event Management (SIEM)

Featured Reviews

reviewer2711757

Cyber Security Software Engineer at a tech services company with 11-50 employees

Automated alerting and reporting excel while cost and feature limitations remain

I find automation to be one of the best and most valuable features of the product. Machine learning is incorporated into the solution, though AI is a broader term that I wouldn't apply here. I haven't personally explored AI yet, but I will investigate it. Machine learning functions more as automation in my experience, as there's no training involved yet. I want to conduct R&D on another project with Wazuh to determine how to capture usage, for example, tracking user logins and time spent. This is where I need to implement machine learning. Additionally, the extraction of GeoIP adds complexity. The solution is effectively reducing incident response times in operations.

Read full review

Usama Khan

Team Lead Soc at a tech services company with 51-200 employees

Advanced threat hunting has improved SOC visibility and now supports faster incident response

Devo can improve in how its connectors enhance integration with third-party tools. Devo's architecture works by having you deploy a relay server in the data center of the client side and Devo SIEM is basically on the AWS cloud. There are specific ports which are enabled on the relay server, which are 514 and 13000, 13151, 152. However, when we talk about databases and custom integrations, there are not default ports in the relay server. No default ports are defined. For JDBC drivers, the port number is 1433, but it is not in the relay server. You have to add it manually. For Oracle RDBMS, the port is 1521, and it is also not there by default. I would appreciate more third-party integrations including Fortinet and others. Machine learning models can also be improved. Playbooks in the SOAR can also be improved. Regarding playbooks for automation, we utilize playbooks for automation in SOAR for automated IOC blocking on a firewall, on a web application firewall, on DNS security, etc. The only option for us to run the playbook is to schedule the job for it. However, if I want to manually run the playbook, there is no option for doing so. This needs improvement.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The integration capabilities of ConnectWise SIEM are off the shelf, making it easy to buy and use; you just unpack it and use it."

"One valuable feature of ConnectWise Fortify is the ability to add other teams and receive notifications when customers make changes or remove multi-factor authentication in Microsoft or SAP environments."

"We have found the solution has great functionality and it is easy to use."

"Those 400 days of hot data mean that people can look for trends and at what happened in the past. And they can not only do so from a security point of view, but even for operational use cases. In the past, our operational norm was to keep live data for only 30 days. Our users were constantly asking us for at least 90 days, and we really couldn't even do that. That's one reason that having 400 days of live data is pretty huge. As our users start to use it and adopt this system, we expect people to be able to do those long-term analytics."

"But from a SaaS standpoint, if not best-in-breed, Devo is certainly in the top-two or top-three."

"Because of the way Devo works, our onboarding time has shrunk by 50 percent at least."

"The user experience [is] well thought out and the workflows are logical. The dashboards are intuitive and highly customizable."

"The most powerful feature is the way the data is stored and extracted. The data is always stored in its original format and you can normalize the data after it has been stored."

"Devo has improved our visibility, log management efficiency, and investigation capabilities positively."

"The strength of Devo is not only in that it is pretty intuitive, but it gives you the flexibility and creativity to merge feeds. The prime examples would be using the synthesis or union tables that give you phenomenal capabilities... The ability to use a synthesis or union table to combine all those feeds and make heads or tails of what's going on, and link it to go down a thread, is functionality that I hadn't seen before."

"Devo has the best features for us because we store close to two terabytes a day of data, and it has come in handy for that as I don't find the system to really lag."

More Devo pros

Cons

"The manage portion of the solution is complicated and should be simplified by having different versions to meet the needs of different size companies."

"ConnectWise Fortify could work on covering more areas, like phishing messages, which have become more complicated to detect."

"ConnectWise SIEM is primarily focused on notifications and is limited in that aspect, while Wazuh can automate the elimination process."

"Devo has a lot of cloud connectors, but they need to do a little bit of work there."

"Their documentation could be better. They are growing quickly and need to have someone focused on tech writing to ensure that all the different updates, how to use them, and all the new features and functionality are properly documented."

"There are some issues from an availability and functionality standpoint, meaning the tool is somewhat slow. There were some slow response periods over the past six to nine months, though it has yet to impact us terribly as we are a relatively small shop. We've noticed it, however, so Devo could improve the responsiveness."

"We only use the core functionality and one of the reasons for this is that their security operation center needs improvement."

"Some third-parties don't have specific API connectors built, so we had to work with Devo to get the logs and parse the data using custom parsers, rather than an out-of-the-box solution."

"Both response time and support quality need attention."

"The tools in Devo's active ports need enhancement in their investigative capabilities."

"The Activeboards feature is not as mature regarding the look and feel."

More Devo cons

Pricing and Cost Advice

"The solution is expensive."

"Devo is a hosted or subscription-based solution, whereas before, we purchased QRadar, so we owned it and just had to pay a maintenance fee. We've encountered this with some other products, too, where we went over to subscription-based. Our thought process is that with subscription based, the provider hosts and maintains the tool, and it's offsite. That comes with some additional fees, but we were able to convince our upper management it was worth the price. We used to pay under 10k a year for maintenance, and now we're paying ten times that. It was a relatively tough sell to our management, but I wonder if we have a choice anymore; this is where the market is."

"Our licensing fees are billed annually and per terabyte."

"I rate the pricing a four on a scale of one to ten, where one is cheap, and ten is expensive."

"Be cautious of metadata inclusion for log types in pricing, as there are some "gotchas" with that."

"We have an OEM agreement with Devo. It is very similar to the standard licensing agreement because we are charged in the same way as any other customer, e.g., we use the backroom."

"The way Devo prices things is based on the amount of data, and I wish the tiers had more granularity. Maybe at this point they do, but when we first negotiated with them, there were only three or four tiers."

"Devo is definitely cheaper than Splunk. There's no doubt about that. The value from Devo is good. It's definitely more valuable to me than QRadar or LogRhythm or any of the old, traditional SIEMs."

"It's very competitive. That was also a primary draw for us. Some of the licensing models with solutions like Splunk and Sentinel were attractive upfront, but there were so many micro-charges and services we would've had to add on to make them what we wanted. We had to include things like SOAR and extended capabilities, whereas all those capabilities are completely included with the Devo platform. I haven't seen any additional fee."

More Devo pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

920,769 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Comms Service Provider

11%

Construction Company

11%

Computer Software Company

Outsourcing Company

Financial Services Firm

16%

Outsourcing Company

11%

Construction Company

10%

Manufacturing Company

10%

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

By reviewers
Company Size	Count
Small Business	11
Midsize Enterprise	6
Large Enterprise	15

Questions from the Community

What needs improvement with ConnectWise Fortify?

I haven't utilized the advanced threat intelligence capabilities with ConnectWise SIEM. Advanced threat intelligence is an option, but I haven't explored this feature yet. The advanced threat intel...

What is your primary use case for ConnectWise Fortify?

I do not have experience with ConnectWise SIEM for RMM, as I mostly work on Wazuh, and I have a team that handles ConnectWise SIEM. I'm linking with them, serving as the bridge. I am solely working...

What advice do you have for others considering ConnectWise Fortify?

The review can be made anonymous if just my name and not the company name is used. I would assess the real-time visibility for my organization as somewhat real-time, but it's not fully real-time. T...

What is your experience regarding pricing and costs for Devo?

The price is considered okay.

What needs improvement with Devo?

In terms of improvements, I think Devo falls short with their support model, as they rely mainly on their support team in Spain. Although they do have a support team in North America, they lack kno...

What is your primary use case for Devo?

Devo is the bank's centralized log management platform that my team and I rely on the most. For centralized log management in our day-to-day work, one of the biggest data users would be our Red Hat...

Zscaler Zero Trust Exchange Platform vs ConnectWise SIEM

Comparisons

Compared 6% of the time

CompassOne by Blackpoint Cyber vs ConnectWise SIEM

Compared 6% of the time

Check Point Harmony SASE (formerly Perimeter 81) vs ConnectWise SIEM

Compared 5% of the time

Wazuh vs ConnectWise SIEM

Compared 4% of the time

SentinelOne Wayfinder Threat Detection and Response vs ConnectWise SIEM

Compared 3% of the time

More ConnectWise SIEM Competitors

Splunk Enterprise Security vs Devo

Compared 7% of the time

LogRhythm SIEM vs Devo

Compared 6% of the time

New Relic vs Devo

Compared 4% of the time

Datadog vs Devo

Compared 3% of the time

Palantir Foundry vs Devo

Compared 2% of the time

More Devo Competitors

Product Reports

Security Information and Event Management (SIEM)

October 2026

Download ConnectWise SIEM product report

Download Devo product report

October 2026

Also Known As

ConnectWise Security Management, ConnectWise Fortify, Continuum Fortify, ConnectWise SIEM, ConnectWise SASE

No data available

Overview

ConnectWise SIEM is a cybersecurity platform designed to enhance threat detection and response capabilities, integrating seamlessly into sophisticated IT infrastructures.

Developed to address complex cybersecurity challenges, ConnectWise SIEM offers robust monitoring and analytics, enabling businesses to detect threats faster and with greater accuracy. It combines security information and event management with advanced intelligence to create a comprehensive security solution that supports real-time analysis and immediate action.

What are the most important features of ConnectWise SIEM?

Advanced Threat Detection: Leverages machine learning to identify potential threats quickly.
Real-Time Alerts: Provides instant notifications to ensure swift response to incidents.
Comprehensive Reporting: Delivers detailed insights to inform decision-making.
Scalability: Adapts to the growing needs of any organization.
Seamless Integration: Connects effortlessly with existing IT tools and platforms.

What benefits or ROI should users look for in reviews?

Reduced Downtime: Minimizes disruptions with proactive threat management.
Cost Efficiency: Lowers overall security expenditure through strategic resource allocation.
Improved Compliance: Assists in meeting industry regulations with comprehensive logs and reports.
Enhanced Security Posture: Strengthens defenses with continuous monitoring and analysis.

ConnectWise SIEM is widely implemented in industries such as finance, healthcare, and retail, where data security is crucial. These sectors benefit from its capability to handle large volumes of data while maintaining regulatory compliance. Its flexibility allows customization to meet specific industry requirements, providing targeted security solutions to protect sensitive information.

ConnectWise

Devo offers powerful visual analytics, real-time data querying, and log integration capabilities within a cloud-native, multi-tenant architecture, supporting extended data retention ideal for long-term analysis and compliance.

Devo is recognized for its Activeboards, which facilitate visual analytics. High-speed search capabilities and real-time analytics enable efficient data manipulation and querying. Its multi-tenant architecture supports effective data segregation and customization tailored to distinct business needs, enhancing its value for handling complex log integrations. With extended data retention of 400 days and a cloud-native architecture, Devo is a robust platform for long-term analysis and compliance requirements. Though opportunities exist to improve browser stability on large searches, SOAR integrations, and its parser capabilities, Devo remains essential for incident response and security monitoring, offering centralized data storage and analysis.

What are Devo's most important features?

Activeboards: Facilitate visual analytics and data exploration.
High-Speed Search: Enables fast data querying and manipulation.
Real-Time Analytics: Supports instant insights and decision-making.
Multi-Tenant Architecture: Allows effective data segregation and customization.
Extended Data Retention: Offers 400-day log retention for compliance and analysis.
Complex Log Integration: Handles intricate data sources effortlessly.

What benefits and ROI should organizations look for in reviews?

Visual Insights: Enhance understanding through interactive dashboards.
Performance Efficiency: Saves time with high-speed data search and real-time results.
Customization Flexibility: Fits specific business requirements with multi-tenant architecture.
Long-Term Compliance: Ensures alignment with extended data retention needs.
Centralized Monitoring: Enables comprehensive incident response and security monitoring.

Devo is extensively used in industries focused on incident response and digital forensics, centralizing data for security monitoring across hybrid environments. Organizations benefit from its ability to store and analyze aggregated logs, creating alerts and dashboards to enhance visibility for network and endpoint activities in multi-domain settings.

Sample Customers

Techvera, Syrex, Clark Integrated Technologies

United States Air Force, Rubrik, SentinelOne, Critical Start, NHL, Panda Security, Telefonica, CaixaBank, OpenText, IGT, OneMain Financial, SurveyMonkey, FanDuel, H&R Block, Ulta Beauty, Manulife, Moneylion, Chime Bank, Magna International, American Express Global Business Travel