Devo vs Seceon Open Threat Management Platform comparison

Devo and Seceon are both solutions in the Security Information and Event Management (SIEM) category. Devo is ranked #18 with an average rating of 8.3, while Seceon is ranked #44 with an average rating of 6.0. Devo holds a 1.2% mindshare in SIEM, compared to Seceon’s 0.8% mindshare. Additionally, 92% of Devo users are willing to recommend the solution, compared to 90% of Seceon users who would recommend it.

Devo

Read 26 Devo reviews

6,972 Views
3,835 Comparison Views

92% willing to recommend

Seceon Open Threat Manageme...

Read 13 Seceon Open Threat Management Platform reviews

2,782 Views
2,726 Comparison Views

90% willing to recommend

Devo

Seceon Open Threat Manageme...

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 18, 2024

Both Devo and Seceon Open Threat Management Platform offer robust solutions in threat management. Seceon seems to have the upper hand thanks to its automation, cost-effectiveness, and smooth deployment.

Features: Devo is praised for real-time data analytics, scalability, and advanced threat detection. Seceon Open Threat Management Platform is commended for comprehensive threat management, ease of use, and automation capabilities.

Room for Improvement: Users suggest Devo enhance its integration capabilities, lower resource consumption, and improve user interface. Seceon users request better documentation, more frequent updates, and enhanced reporting tools.

Ease of Deployment and Customer Service: Devo users find the deployment straightforward but note occasional support complexities. Seceon is known for smooth deployment and responsive customer service.

Pricing and ROI: Devo's setup costs are high but offer long-term ROI through enhanced security. Seceon provides a more cost-effective initial setup and strong ROI for comprehensive threat management features.

To learn more, read our detailed Devo vs. Seceon Open Threat Management Platform Report (Updated: June 2026).

Buyer's Guide

Devo vs. Seceon Open Threat Management Platform

June 2026

Download the complete report

Helped 908,800 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Devo

Ranking in Security Information and Event Management (SIEM)

18th

Average Rating

8.4

Reviews Sentiment

6.5

Number of Reviews

Ranking in other categories

Log Management (18th), IT Operations Analytics (7th), AIOps (13th)

Seceon Open Threat Manageme...

Ranking in Security Information and Event Management (SIEM)

44th

Average Rating

7.8

Reviews Sentiment

7.5

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of August 2026, in the Security Information and Event Management (SIEM) category, the mindshare of Devo is 1.2%, up from 1.1% compared to the previous year. The mindshare of Seceon Open Threat Management Platform is 0.8%, up from 0.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Security Information and Event Management (SIEM) Mindshare Distribution
Product	Mindshare (%)
Devo	1.2%
Seceon Open Threat Management Platform	0.8%
Other	98.0%

Security Information and Event Management (SIEM)

Featured Reviews

Usama Khan

Team Lead SOC at a tech services company with 51-200 employees

Advanced threat hunting has improved SOC visibility and now supports faster incident response

Devo can improve in how its connectors enhance integration with third-party tools. Devo's architecture works by having you deploy a relay server in the data center of the client side and Devo SIEM is basically on the AWS cloud. There are specific ports which are enabled on the relay server, which are 514 and 13000, 13151, 152. However, when we talk about databases and custom integrations, there are not default ports in the relay server. No default ports are defined. For JDBC drivers, the port number is 1433, but it is not in the relay server. You have to add it manually. For Oracle RDBMS, the port is 1521, and it is also not there by default. I would appreciate more third-party integrations including Fortinet and others. Machine learning models can also be improved. Playbooks in the SOAR can also be improved. Regarding playbooks for automation, we utilize playbooks for automation in SOAR for automated IOC blocking on a firewall, on a web application firewall, on DNS security, etc. The only option for us to run the playbook is to schedule the job for it. However, if I want to manually run the playbook, there is no option for doing so. This needs improvement.

Read full review

TamimKhan

Solution Architect at Tiger IT Bangladesh Limited

Customization options need improvement but valuable threat management features and reasonable pricing benefit service providers

We are a Managed Security Service Provider (MSSP), and we provide services to our customers Seceon Open Threat Management Platform offers valuable features such as XDR and EDR. I also find the SOC and SOAR features valuable. Log management is another key functionality of the product. There are…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The drill-down reports capabilities allow analysts to click on any element in a widget. When they see a spike in a line chart for a failed login, which could be a true or false attempt, they can click that spike, and a table widget on the same active board instantly populates with raw logs of data for those specific failed logins."

"The alerting is much better than I anticipated. We don't get as many alerts as I thought we would, but that nobody's fault, it's just the way it is."

"Overall, I have no issues with it and my guys love it."

"Scalability is one of Devo's strengths."

"The ROI has been great as we could launch it in a few months instead of a couple of years, and when you put all the costs together, it is less to have done it than with the open source approach."

"More than anything, we have seen ROI in the amount of time saved during investigations."

"The strength of Devo is not only in that it is pretty intuitive, but it gives you the flexibility and creativity to merge feeds. The prime examples would be using the synthesis or union tables that give you phenomenal capabilities... The ability to use a synthesis or union table to combine all those feeds and make heads or tails of what's going on, and link it to go down a thread, is functionality that I hadn't seen before."

"Devo has improved our visibility, log management efficiency, and investigation capabilities positively."

More Devo pros

"Seceon Open Threat Management Platform notifies only genuine alerts. It offers plenty of options that are suitable for MSPs."

"The solution is very cost-effective compared to Splunk and LogRhythm."

"I like that it's an AI-based platform. The most valuable feature is that it's a comprehensive solution. Most tools in the marketplace are comprised of miscellaneous items. They fail to provide real-time remediation features. However, with Seceon Open Threat Management Platform, anything you can think of in cybersecurity, like auto-remediation, real-time response, and even on-premise components, is available in a single platform. So, it's perfect for finance and healthcare who don't want to share their data with a third party like the cloud. You can have this on-premise as well. So, the expenditure will be lower as less human intervention is required."

"The algorithm used in Seceon OTM is clear and logical, categorizing events as needed. This helps us identify and respond to threats effectively."

"Seceon Open Threat Management Platform provides a more straightforward implementation that is better than Splunk and offers an AI-based platform with machine learning and deep learning capabilities."

"The most valuable features are behaviour analytics, threat intelligence, endpoint detection, and response features."

"We only recently started using Seceon, so we aren't taking advantage of all its features yet. We have enabled some proactive alerts about utilization and bottlenecks from high traffic."

"The most valuable feature of this solution is its artificial intelligence."

More Seceon Open Threat Management Platform pros

Cons

"My opinion on the solution's technical support is not as great as it could be because of the issues I have faced regarding the service management element."

"From our experience, the Devo agent needs some work. They built it on top of OS Query's open-source framework. It seems like it wasn't tuned properly to handle a large volume of Windows event logs. In our experience, there would definitely be some room for improvement. A lot of SIEMs on the market have their own agent infrastructure. I think Devo's working towards that, but I think that it needs some improvement as far as keeping up with high-volume environments."

"Where Devo has room for improvement is the data ingestion and parsing. We tend to have to work with the Devo support team to bring on and ingest new sources of data."

"One improvement area for Devo could be simplifying some configuration and improving the onboarding for new analysts because it is quite complex for fresher or new analysts who are handling Devo."

"Some of the documentation could be improved a little bit. A lot of times it doesn't go as deep into some of the critical issues you might run into. They've been really good to shore us up with support, but some of the documentation could be a little bit better."

"I would like to have the ability to create more complex dashboards."

"Technical support could be better."

"There are some issues from an availability and functionality standpoint, meaning the tool is somewhat slow. There were some slow response periods over the past six to nine months, though it has yet to impact us terribly as we are a relatively small shop. We've noticed it, however, so Devo could improve the responsiveness."

More Devo cons

"The management console could use some enhancements."

"It would be ideal with the processing was more manageable."

"The product could be improved by including sandboxing capabilities in the next release."

"It is a standalone solution now. They need to make it into a cloud-based subscription model. It needs more compatibility for co-managed solutions. It can also have more threats and deeper integration with Microsoft."

"Seceon Open Threat Management Platform sells some add-ons as part of the whole suite but not individually. If they sold them individually, they could potentially attract more business."

"For future releases, integrating incident response tools and improving communication on incident reporting could be beneficial."

"It would be ideal with the processing was more manageable. Not many customers are willing to have a dedicated server with two CPUs and one TB of memory. The cost of this is huge for a smaller organization."

"It would be better if they offered global coverage."

More Seceon Open Threat Management Platform cons

Pricing and Cost Advice

"Our licensing fees are billed annually and per terabyte."

"[Devo was] in the ballpark with at least a couple of the other front-runners that we were looking at. Devo is a good value and, given the quality of the product, I would expect to pay more."

"Devo is definitely cheaper than Splunk. There's no doubt about that. The value from Devo is good. It's definitely more valuable to me than QRadar or LogRhythm or any of the old, traditional SIEMs."

"Be cautious of metadata inclusion for log types in pricing, as there are some "gotchas" with that."

"I like the pricing very much. They keep it simple. It is a single price based on data ingested, and they do it on an average. If you get a spike of data that flows in, they will not stick it to you or charge you for that. They are very fair about that."

"I'm not involved in the financial aspect, but I think the licensing costs are similar to other solutions. If all the solutions have a similar cost, Devo provides more for the money."

"It's very competitive. That was also a primary draw for us. Some of the licensing models with solutions like Splunk and Sentinel were attractive upfront, but there were so many micro-charges and services we would've had to add on to make them what we wanted. We had to include things like SOAR and extended capabilities, whereas all those capabilities are completely included with the Devo platform. I haven't seen any additional fee."

"The way Devo prices things is based on the amount of data, and I wish the tiers had more granularity. Maybe at this point they do, but when we first negotiated with them, there were only three or four tiers."

More Devo pricing and cost advice

"The solution is cheap and very competitive. It offers good tuning in terms of the pricing. Other solutions like Palo Alto and IBM are more expensive."

"I find Seceon OTM's pricing to be reasonable, not too high or low, just okay for the market standards. I can't disclose specific figures, we pay on a quarterly basis under a service model. I would rate it eight out of ten. As a customer, I always hope for better pricing options."

"The price is quite reasonable."

"Seceon Open Threat Management Platform is cost-effective because it's a comprehensive platform that offers high availability."

"It has a per-asset model instead of an ingestion-based model, which gives predictable pricing. In terms of price, it is in the middle to lower range of SIEMs that it competes against. It is the most affordable solution that we have implemented so far. It was much more affordable than anything else I've implemented."

"The pricing is very competitive. It's not expensive."

"We used the solution's trial version for two months and later purchased it."

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

908,800 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

15%

Construction Company

10%

Outsourcing Company

Manufacturing Company

12%

Outsourcing Company

Computer Software Company

Financial Services Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	10
Midsize Enterprise	5
Large Enterprise	12

By reviewers
Company Size	Count
Small Business	9
Midsize Enterprise	5
Large Enterprise	1

Questions from the Community

What is your experience regarding pricing and costs for Devo?

The pricing of the product is reasonable if we compare it with other Gartner leading products like Splunk, LogRhythm, Microsoft Sentinel, Google SecOps. Its licensing model is basically on per-day ...

See all answers

What needs improvement with Devo?

See all answers

What is your primary use case for Devo?

I am using Devo myself. Basically, I work at an MSSP, and we provide services to the organization for Security Operation Centers. In our Security Operation Center, we provide the service of SIEM vi...

See all answers

What is your experience regarding pricing and costs for Seceon Open Threat Management Platform?

The pricing of Seceon Open Threat Management Platform is very reasonable.

See all answers

What needs improvement with Seceon Open Threat Management Platform?

There are areas for improvement in the customization options. Every ( /products/every-reviews ) quarter, they are developing the platform with new updates based on feedback provided.

See all answers

What is your primary use case for Seceon Open Threat Management Platform?

We are a Managed Security Service Provider (MSSP ( /categories/managed-security-services-providers-mssp )), and we provide services to our customers.

See all answers

Comparisons

Splunk Enterprise Security vs Devo

Compared 8% of the time

LogRhythm SIEM vs Devo

Compared 7% of the time

New Relic vs Devo

Compared 4% of the time

IBM Security QRadar vs Devo

Compared 3% of the time

Datadog vs Devo

Compared 3% of the time

More Devo Competitors

Microsoft Sentinel vs Seceon Open Threat Management Platform

Compared 15% of the time

IBM Security QRadar vs Seceon Open Threat Management Platform

Compared 13% of the time

DNIF HYPERCLOUD vs Seceon Open Threat Management Platform

Compared 7% of the time

LogRhythm SIEM vs Seceon Open Threat Management Platform

Compared 6% of the time

Splunk Enterprise Security vs Seceon Open Threat Management Platform

Compared 5% of the time

More Seceon Open Threat Management Platform Competitors

Product Reports

Buyer's Guide

Devo

August 2026

Download Devo product report

Buyer's Guide

Seceon Open Threat Management Platform

July 2026

Seceon Open Threat Management Platform report

Download Seceon Open Threat Management Platform product report

Also Known As

No data available

Seceon OTM, Seceon aiSIEM, aiSIEM, Seceon Open Threat Management

Overview

Devo offers powerful visual analytics, real-time data querying, and log integration capabilities within a cloud-native, multi-tenant architecture, supporting extended data retention ideal for long-term analysis and compliance.

Devo is recognized for its Activeboards, which facilitate visual analytics. High-speed search capabilities and real-time analytics enable efficient data manipulation and querying. Its multi-tenant architecture supports effective data segregation and customization tailored to distinct business needs, enhancing its value for handling complex log integrations. With extended data retention of 400 days and a cloud-native architecture, Devo is a robust platform for long-term analysis and compliance requirements. Though opportunities exist to improve browser stability on large searches, SOAR integrations, and its parser capabilities, Devo remains essential for incident response and security monitoring, offering centralized data storage and analysis.

What are Devo's most important features?

Activeboards: Facilitate visual analytics and data exploration.
High-Speed Search: Enables fast data querying and manipulation.
Real-Time Analytics: Supports instant insights and decision-making.
Multi-Tenant Architecture: Allows effective data segregation and customization.
Extended Data Retention: Offers 400-day log retention for compliance and analysis.
Complex Log Integration: Handles intricate data sources effortlessly.

What benefits and ROI should organizations look for in reviews?

Visual Insights: Enhance understanding through interactive dashboards.
Performance Efficiency: Saves time with high-speed data search and real-time results.
Customization Flexibility: Fits specific business requirements with multi-tenant architecture.
Long-Term Compliance: Ensures alignment with extended data retention needs.
Centralized Monitoring: Enables comprehensive incident response and security monitoring.

Devo is extensively used in industries focused on incident response and digital forensics, centralizing data for security monitoring across hybrid environments. Organizations benefit from its ability to store and analyze aggregated logs, creating alerts and dashboards to enhance visibility for network and endpoint activities in multi-domain settings.

Devo

Seceon Open Threat Management Platform offers a blend of cost-effectiveness and ease of use, featuring AI, real-time remediation, and endpoint detection, suitable for sectors like finance and healthcare.

Combining AI-driven analysis with real-time threat remediation, Seceon Open Threat Management Platform provides comprehensive security management. Users value its stability and the absence of hardware requirements. Its features, including XDR/EDR and SOC/SOAR, focus on improving response times and lowering costs. The platform's integration capabilities and genuine alert customization enhance its effectiveness. Designed with businesses in mind, it requires no coding for its pre-built features, streamlining processes like threat hunting and incident monitoring through a single license. However, cloud model development and enhanced training are needed, and it entails high costs for smaller enterprises.

What are the most important features?

Artificial Intelligence: Improves threat detection accuracy.
Real-Time Remediation: Automates threat response actions.
Behavior Analytics: Identifies abnormal activities efficiently.
Endpoint Detection: Guards against endpoint vulnerabilities.
Integration Capabilities: Connects with a range of security tools.

What benefits or ROI should users look for?

Cost Reduction: Lowers operational expenses via AI automation.
Quick Onboarding: Accelerated deployment process.
Improved Response Time: Faster threat mitigation.
Minimized Hardware Needs: Decreases infrastructure costs.

Banks and managed security service providers deploy Seceon Open Threat Management Platform to centralize threat management and analysis. In healthcare and finance, it streamlines SIEM management and ensures compliance, leveraging its AI capabilities to provide efficient endpoint protection and enhance security operations. Despite needing better global coverage and management enhancements, it helps manage security events quickly and effectively.

Seceon

Sample Customers

United States Air Force, Rubrik, SentinelOne, Critical Start, NHL, Panda Security, Telefonica, CaixaBank, OpenText, IGT, OneMain Financial, SurveyMonkey, FanDuel, H&R Block, Ulta Beauty, Manulife, Moneylion, Chime Bank, Magna International, American Express Global Business Travel

Caduceus, SUNY

Buyer's Guide

Devo vs. Seceon Open Threat Management Platform

June 2026

Free Report: Devo vs. Seceon Open Threat Management Platform

Find out what your peers are saying about Devo vs. Seceon Open Threat Management Platform and other solutions. Updated: June 2026.

DOWNLOAD NOW

908,800 professionals have used our research since 2012.

See our Devo vs. Seceon Open Threat Management Platform report.

See our list of best Security Information and Event Management (SIEM) vendors.

We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.