No more typing reviews! Try our Samantha, our new voice AI agent.

Devo vs OpenText Behavioral Signals comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 3, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
6.6
Devo enhances efficiency, reduces costs, and provides faster insights with seamless integration, boosting ROI and scalability without extra expenses.
Sentiment score
8.9
ArcSight Intelligence boosts security and ROI by automating threat detection, reducing false positives, and streamlining workflows with advanced analytics.
Devo gives value to the end user and is saving compared to other products in the same category.
Principal Consultant at Syntx Sdn Bhd
 

Customer Service

Sentiment score
6.6
Devo excels in customer service with rapid responses and collaborative support, though some users seek improved escalation processes.
Sentiment score
6.7
OpenText Behavioral Signals' support is responsive and skilled, but resolution may be slow and feedback sometimes lacks depth.
I rate the customer support a nine out of ten because of their timely technical guidance and responsiveness during the deployment and troubleshooting periods.
Cyber Security Engineer Ii (Vulnerability & Threat Management) at FICO
Technical support from Devo is helpful.
Principal Consultant at Syntx Sdn Bhd
Both response time and support quality need attention.
Team Lead Soc at a tech services company with 51-200 employees
 

Scalability Issues

Sentiment score
7.0
Devo offers scalable data handling and integration with AWS, supporting diverse team needs with flexible, growth-ready architecture.
Sentiment score
6.3
OpenText Behavioral Signals faces scalability challenges, while technologies like ArcSight Intelligence excel, prompting consideration of alternatives like Splunk.
Devo is a unified SIEM solution designed to handle growing log volumes and enterprise-scale monitoring requirements.
Cyber Security Engineer Ii (Vulnerability & Threat Management) at FICO
 

Stability Issues

Sentiment score
7.4
Devo offers reliable service with minimal downtime, quick issue resolution, and high user satisfaction despite infrequent minor outages.
Sentiment score
8.4
OpenText Behavioral Signals is praised for its stability, receiving high ratings and fostering user trust through reliable performance.
It is stable and reliable for our security operations.
Cyber Security Engineer Ii (Vulnerability & Threat Management) at FICO
 

Room For Improvement

Devo's Activeboards need more customization, better integrations, improved performance, enhanced usability, and comprehensive documentation for new users.
OpenText and ArcSight require updates for usability, scalability, and pricing to compete with QRadar and Splunk effectively.
The only option for us to run the playbook is to schedule the job for it. However, if I want to manually run the playbook, there is no option for doing so.
Team Lead Soc at a tech services company with 51-200 employees
This is particularly evident when dealing with failed login attempts and determining true versus false positives.
Strategic Account Executive at a computer software company with 51-200 employees
UI improvements, a simplified dashboard, or an easier reporting workflow could further improve analyst productivity.
Cyber Security Engineer Ii (Vulnerability & Threat Management) at FICO
 

Setup Cost

Devo's pricing is straightforward with data-based costs, appealing cloud model, but concerns exist over metadata charges.
OpenText Behavioral Signals offers enterprise-priced licensing options with additional charges for new features not in the base license.
The pricing of the product is reasonable if we compare it with other Gartner leading products like Splunk, LogRhythm, Microsoft Sentinel, Google SecOps.
Team Lead Soc at a tech services company with 51-200 employees
 

Valuable Features

Devo offers real-time analytics, customizable integration, powerful visualization, secure architecture, and advanced querying for effective threat detection and analysis.
OpenText Behavioral Signals synthesizes diverse logs, customizes environments, and enhances efficiency with a user-friendly, consolidated interface.
It utilizes 400 days of hot data, allowing queries to run very fast and yield results quicker than other tools in terms of security and SIEM capability.
Senior Cloud Engineer at a tech services company with 201-500 employees
When they see a spike in a line chart for a failed login, which could be a true or false attempt, they can click that spike, and a table widget on the same active board instantly populates with raw logs of data for those specific failed logins.
Strategic Account Executive at a computer software company with 51-200 employees
The product provides insight and analytics, and the visualization part contributes to how I understand data insights.
Principal Consultant at Syntx Sdn Bhd
 

Categories and Ranking

Devo
Ranking in Security Information and Event Management (SIEM)
17th
Average Rating
8.4
Reviews Sentiment
6.6
Number of Reviews
27
Ranking in other categories
Log Management (17th), IT Operations Analytics (7th), AIOps (16th)
OpenText Behavioral Signals
Ranking in Security Information and Event Management (SIEM)
46th
Average Rating
8.0
Reviews Sentiment
6.6
Number of Reviews
5
Ranking in other categories
User Entity Behavior Analytics (UEBA) (16th)
 

Mindshare comparison

As of September 2026, in the Security Information and Event Management (SIEM) category, the mindshare of Devo is 1.2%, up from 1.2% compared to the previous year. The mindshare of OpenText Behavioral Signals is 1.0%, up from 0.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM) Mindshare Distribution
ProductMindshare (%)
Devo1.2%
OpenText Behavioral Signals1.0%
Other97.8%
Security Information and Event Management (SIEM)
 

Featured Reviews

Usama Khan - PeerSpot reviewer
Team Lead Soc at a tech services company with 51-200 employees
Advanced threat hunting has improved SOC visibility and now supports faster incident response
Devo can improve in how its connectors enhance integration with third-party tools. Devo's architecture works by having you deploy a relay server in the data center of the client side and Devo SIEM is basically on the AWS cloud. There are specific ports which are enabled on the relay server, which are 514 and 13000, 13151, 152. However, when we talk about databases and custom integrations, there are not default ports in the relay server. No default ports are defined. For JDBC drivers, the port number is 1433, but it is not in the relay server. You have to add it manually. For Oracle RDBMS, the port is 1521, and it is also not there by default. I would appreciate more third-party integrations including Fortinet and others. Machine learning models can also be improved. Playbooks in the SOAR can also be improved. Regarding playbooks for automation, we utilize playbooks for automation in SOAR for automated IOC blocking on a firewall, on a web application firewall, on DNS security, etc. The only option for us to run the playbook is to schedule the job for it. However, if I want to manually run the playbook, there is no option for doing so. This needs improvement.
Pravir KumarSinha - PeerSpot reviewer
Information Security at Synechron
Has essential threat detection capabilities, but the features for intelligence need enhancement
We integrated this tool with our security infrastructure. We installed it on a Linux server, where we have a Logger and ESM installed. With the Linux server as the hub, we manage all the configurations and rules, including those for email triggers. The logs are routed through a connector to the Logger, allowing us to monitor our infrastructure effectively. The platform helps us improve threat detection capabilities. I recommend it to others and rate it a seven out of ten.
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
913,924 professionals have used our research since 2012.
 

Comparison Review

it_user186927 - PeerSpot reviewer
Director of Operations at a comms service provider with 10,001+ employees
Feb 16, 2015
Cybereason vs. Interset vs. SQRRL
Capture DB - they all use NoSQL db and hence solve the ad hoc query and 'go back in time' problem with current best of breed SIEM and DLP solutions that rely on real time analysis of incoming logs (and don't store them). This means deeper and quicker iterative threat analysis and assessment…
 

Top Industries

By visitors reading reviews
Financial Services Firm
13%
Outsourcing Company
11%
Construction Company
10%
Manufacturing Company
9%
Construction Company
13%
Comms Service Provider
12%
Financial Services Firm
9%
Outsourcing Company
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise6
Large Enterprise12
No data available
 

Questions from the Community

What needs improvement with Devo?
Perhaps Devo could add some features in the future on the network part. Specifically, I think they could improve network traffic analysis capabilities.
What is your primary use case for Devo?
I have been using Devo as a partner and system integrator for three years. For log monitoring, the clients' use cases can utilize Devo perfectly. Compliance and security operation monitoring are th...
Ask a question
Earn 20 points
 

Also Known As

No data available
ArcSight Interset / Intelligence, FileTrek, Interset UEBA, Micro Focus Interset UEBA, Micro Focus Interset, ArcSight Interset
 

Overview

 

Sample Customers

United States Air Force, Rubrik, SentinelOne, Critical Start, NHL, Panda Security, Telefonica, CaixaBank, OpenText, IGT, OneMain Financial, SurveyMonkey, FanDuel, H&R Block, Ulta Beauty, Manulife, Moneylion, Chime Bank, Magna International, American Express Global Business Travel
Accuvant, Splunk Inc., NuTech, Box, rSolutions, Voodoo Technology Limited
Find out what your peers are saying about Devo vs. OpenText Behavioral Signals and other solutions. Updated: September 2026.
913,924 professionals have used our research since 2012.