No more typing reviews! Try our Samantha, our new voice AI agent.

Devo vs SentinelOne Singularity AI SIEM comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 29, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
6.2
Devo provided improved ROI through cost savings and efficiency, despite some concerns over costs and support challenges.
Sentiment score
6.0
SentinelOne Singularity AI SIEM improves efficiency by reducing alerts, false positives, manual workload, and downtime, offering competitive pricing.
Devo gives value to the end user and is saving compared to other products in the same category.
Principal Consultant at Syntx Sdn Bhd
In terms of return on investment with Devo, I'd say it has been costly due to the need for support and the overtime required for issues experienced at the beginning of the project.
Senior Consultant and Technical Lead at a financial services firm with 10,001+ employees
We achieve early identification of security incidents that could potentially breach the customer environment, which would have been costly.
Principal Technology Architect at a tech vendor with 10,001+ employees
If the data gets encrypted, it automatically rolls back.
Senior Technical Engineer at Safezone Secure Solutions Private Limited
Before using SentinelOne Singularity AI SIEM, investigating a moderately complex alert took around thirty to sixty minutes because analysts had to collect logs from multiple security tools.
Desktop support Engineer at a outsourcing company with 51-200 employees
SentinelOne Singularity AI SIEM has reduced our response time to true positive alerts by approximately forty percent through automation.
IT Security Analyst at a tech consulting company with 11-50 employees
 

Customer Service

Sentiment score
6.2
Customer service is responsive and proactive, but needs improvement in onboarding, documentation, and regional service consistency.
Sentiment score
6.6
SentinelOne support is effective yet slow, praised for expertise but hindered by transfer issues, costs, and communication delays.
I rate the customer support a nine out of ten because of their timely technical guidance and responsiveness during the deployment and troubleshooting periods.
Cyber Security Engineer Ii (Vulnerability & Threat Management) at FICO
Both response time and support quality need attention.
Team Lead Soc at a tech services company with 51-200 employees
Technical support from Devo is helpful.
Principal Consultant at Syntx Sdn Bhd
Issues involving log ingestion or third-party integrations may require additional investigation and coordination.
MDR Analyst at a computer software company with 51-200 employees
SentinelOne Singularity AI SIEM has AI-based technical support available.
IT Security Analyst at a tech consulting company with 11-50 employees
Based on my experience with the technical support of SentinelOne Singularity AI SIEM, I would rate them a ten.
Vice President Cyber Security Practice Head at orbit techsol w pvt.ltd
 

Scalability Issues

Sentiment score
6.9
Praised for scalability, Devo efficiently manages large logs, easily expands use, but multi-tenancy features need development.
Sentiment score
6.5
SentinelOne Singularity AI SIEM offers scalable cloud-based security, efficiently managing data growth and complex IT structures, despite integration challenges.
Devo is a unified SIEM solution designed to handle growing log volumes and enterprise-scale monitoring requirements.
Cyber Security Engineer Ii (Vulnerability & Threat Management) at FICO
Devo's scalability has its challenges.
Senior Consultant and Technical Lead at a financial services firm with 10,001+ employees
Regarding Devo's scalability, its horizontal scalability is quite good with no significant hassle.
Principal Technology Architect at a tech vendor with 10,001+ employees
It is designed to handle growing log volumes and supports environments that include on-premises infrastructure, cloud services, endpoints, identity platforms, and network devices.
Desktop support Engineer at a outsourcing company with 51-200 employees
With any AI adoption, the end goal should be more governance and data security and safety.
Associate Vice President at Novac Technology Solutions
The performance depends on the configuration.
IT Security Analyst at a tech consulting company with 11-50 employees
 

Stability Issues

Sentiment score
7.5
Devo offers reliable performance with minimal outages, praised for proactive alerts and quick incident resolution, ensuring business continuity.
Sentiment score
7.9
SentinelOne Singularity AI SIEM offers stable SOC operations with efficient log searches, despite occasional upgrade-related issues.
It is stable and reliable for our security operations.
Cyber Security Engineer Ii (Vulnerability & Threat Management) at FICO
I have worked with it, and it is very handy, easy to manage, and excellent with its AI-driven capabilities.
Cybersecurity Engineer at Gigabit Technologies Pvt Ltd
When it comes to stability, I would give SentinelOne Singularity AI SIEM a nine.
IT Security Consultant at Systemhaus for you GmbH
In terms of performance stability, I have never had any crashes, downtimes, or performance issues.
Cyber Security Engineer at a retailer with 201-500 employees
 

Room For Improvement

Devo needs enhancements in support, performance, AI, customization, and documentation, focusing on data management and UI configuration.
SentinelOne Singularity AI SIEM faces high false positives, performance issues, limited integrations, and needs better usability and automation.
It's hard for us to keep pace since our original use case was 250 to 500 megabytes a day, and then it became two terabytes a day.
Senior Consultant and Technical Lead at a financial services firm with 10,001+ employees
Integrating custom parsing and mapping for non-standard logs is essential due to compatibility challenges with various technologies.
Principal Technology Architect at a tech vendor with 10,001+ employees
This is particularly evident when dealing with failed login attempts and determining true versus false positives.
Strategic Account Executive at a computer software company with 51-200 employees
The adoption rate will be less compared to other products, as this can be a time-taken process because all my data needs to be offloaded and the system needs to understand my existing alerts, logs, and other things.
Associate Vice President at Novac Technology Solutions
The interface flickers frequently, and sometimes it does not load properly.
IT Security Analyst at a tech consulting company with 11-50 employees
Whenever OT security comes into the picture, the customers do not allow us to integrate their OT devices on a cloud. It should be available on-premises because the OT SIEM market, in the India market for instance, is something around a four to eight billion dollar market.
Vice President Cyber Security Practice Head at orbit techsol w pvt.ltd
 

Setup Cost

Devo offers competitive, simple data ingestion-based pricing with extensive features and flexibility, despite some limitations in tier options.
Enterprise buyers appreciate SentinelOne's value-driven, flexible pricing and comprehensive features, offering efficient, cost-effective AI-driven security management.
The pricing could be simpler, and while the initial setup cost for a new instance is a bit expensive, the licensing can currently be user-based or driven by log volume, which is better if there is expansion of our user base.
Principal Technology Architect at a tech vendor with 10,001+ employees
The pricing of the product is reasonable if we compare it with other Gartner leading products like Splunk, LogRhythm, Microsoft Sentinel, Google SecOps.
Team Lead Soc at a tech services company with 51-200 employees
I find SentinelOne's pricing to be reasonable and competitive.
Senior Information Security Principal at a venture capital & private equity firm with 1,001-5,000 employees
Features such as centralized log management, AI-driven analytics, automated workflow, and integrated security options can reduce operational overhead and improve SOC efficiency, which helps justify the investment.
Desktop support Engineer at a outsourcing company with 51-200 employees
Compared to another SIEM tool's pricing, the pricing is the best, from my side.
Technical Support Executive at Softcell Technologies Limited
 

Valuable Features

Devo excels in real-time analytics, large data handling, customization, and third-party integration, enhancing security operations with advanced features.
SentinelOne Singularity AI SIEM offers enhanced threat detection, real-time monitoring, automation, and third-party integration for improved security efficiency.
When they see a spike in a line chart for a failed login, which could be a true or false attempt, they can click that spike, and a table widget on the same active board instantly populates with raw logs of data for those specific failed logins.
Strategic Account Executive at a computer software company with 51-200 employees
When the analyst uses queries to search, it pulls the data quickly, in a second, which aids us greatly with the investigation.
Cyber Security Engineer Ii (Vulnerability & Threat Management) at FICO
It utilizes 400 days of hot data, allowing queries to run very fast and yield results quicker than other tools in terms of security and SIEM capability.
Senior Cloud Engineer at a tech services company with 201-500 employees
We finally have visibility into things that were never visible before.
IT Security Consultant at Systemhaus for you GmbH
It employs a combination of AI and ML to check for viruses or any other malicious processes, including fileless attacks.
Cyber Security Engineer at a retailer with 201-500 employees
The AI-driven threat detection capabilities improve our overall security posture.
Associate Vice President at Novac Technology Solutions
 

Categories and Ranking

Devo
Ranking in Security Information and Event Management (SIEM)
16th
Average Rating
8.2
Reviews Sentiment
6.5
Number of Reviews
30
Ranking in other categories
Log Management (21st), IT Operations Analytics (7th), AIOps (17th)
SentinelOne Singularity AI ...
Ranking in Security Information and Event Management (SIEM)
7th
Average Rating
8.6
Reviews Sentiment
6.4
Number of Reviews
18
Ranking in other categories
AI Observability (6th)
 

Mindshare comparison

As of November 2026, in the Security Information and Event Management (SIEM) category, the mindshare of Devo is 1.2%, up from 1.1% compared to the previous year. The mindshare of SentinelOne Singularity AI SIEM is 1.2%, up from 1.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM) Mindshare Distribution
ProductMindshare (%)
SentinelOne Singularity AI SIEM1.2%
Devo1.2%
Other97.6%
Security Information and Event Management (SIEM)
 

Featured Reviews

Usama Khan - PeerSpot reviewer
Team Lead Soc at a tech services company with 51-200 employees
Advanced threat hunting has improved SOC visibility and now supports faster incident response
Devo can improve in how its connectors enhance integration with third-party tools. Devo's architecture works by having you deploy a relay server in the data center of the client side and Devo SIEM is basically on the AWS cloud. There are specific ports which are enabled on the relay server, which are 514 and 13000, 13151, 152. However, when we talk about databases and custom integrations, there are not default ports in the relay server. No default ports are defined. For JDBC drivers, the port number is 1433, but it is not in the relay server. You have to add it manually. For Oracle RDBMS, the port is 1521, and it is also not there by default. I would appreciate more third-party integrations including Fortinet and others. Machine learning models can also be improved. Playbooks in the SOAR can also be improved. Regarding playbooks for automation, we utilize playbooks for automation in SOAR for automated IOC blocking on a firewall, on a web application firewall, on DNS security, etc. The only option for us to run the playbook is to schedule the job for it. However, if I want to manually run the playbook, there is no option for doing so. This needs improvement.
reviewer2915043 - PeerSpot reviewer
System Engineer at a consultancy with 11-50 employees
Centralized monitoring has improved threat detection speed and simplified alert investigations
It would be helpful if some alerts had cleaner, clearer explanations right away, such as suggesting next steps inside the alert, and fewer clicks to get from alert to raw event details would make the triage even faster. Integration could be more plug-and-play, and improving built-in guidance for new analysts would help cut the learning curve. Performance-wise, it is adequate for us, but easier bulk searches would make investigations smoother. It would be helpful for each alert to come with clear suggested next steps right inside the alert, so analysts do not have to guess or click around too much. Making integration more plug-and-play would smooth out setup for new data sources.
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
920,929 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
16%
Outsourcing Company
11%
Construction Company
10%
Manufacturing Company
9%
Outsourcing Company
22%
Media Company
9%
Manufacturing Company
7%
Comms Service Provider
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business11
Midsize Enterprise6
Large Enterprise15
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise6
Large Enterprise4
 

Questions from the Community

What needs improvement with Devo?
In terms of improvements, I think Devo falls short with their support model, as they rely mainly on their support team in Spain. Although they do have a support team in North America, they lack kno...
What is your primary use case for Devo?
Devo is the bank's centralized log management platform that my team and I rely on the most. For centralized log management in our day-to-day work, one of the biggest data users would be our Red Hat...
What needs improvement with SentinelOne Singularity AI SIEM?
My impression of the AI-driven threat detection capabilities is that it helps a little bit, but they need to tune it a bit because we are seeing too many false positives recently. Since we are a pa...
What is your primary use case for SentinelOne Singularity AI SIEM?
SentinelOne Singularity AI SIEM is a tool that we use to support our clients. Our organization is a service-based organization, so we use SIEM to provide services to software-based clients. We are ...
What advice do you have for others considering SentinelOne Singularity AI SIEM?
In my organization, approximately eighty people work with SentinelOne Singularity AI SIEM. Our clients vary in size; we have small businesses, medium enterprises, and large enterprises as well. Sen...
 

Overview

 

Sample Customers

United States Air Force, Rubrik, SentinelOne, Critical Start, NHL, Panda Security, Telefonica, CaixaBank, OpenText, IGT, OneMain Financial, SurveyMonkey, FanDuel, H&R Block, Ulta Beauty, Manulife, Moneylion, Chime Bank, Magna International, American Express Global Business Travel
Information Not Available
Find out what your peers are saying about Devo vs. SentinelOne Singularity AI SIEM and other solutions. Updated: September 2026.
920,929 professionals have used our research since 2012.