No more typing reviews! Try our Samantha, our new voice AI agent.
Devo Logo

Devo pros and cons

Vendor: Devo
4.2 out of 5

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

Devo allows rapid querying of multiple data sources, enabling faster security analysis and response.
Real-time analytics and high-speed processing improve efficiency in handling security data.
Devo has extensive parsing capabilities, with over 450 parsers to handle various log types.
Devo offers 400 days of data retention, supporting long-term trend analysis and operational insights.
Devo provides a multi-tenant, cloud-native architecture, ideal for global organizations needing data consolidation and separation.

CONS

Documentation needs improvement with better focus on tech writing and updates.
Activeboards' functionality is limited to a single graphics format without customization options.
There is significant room for improvement in parsing different log types, including support for logs from major vendors.
Technical support and agent infrastructure require enhancements for handling large volumes of data.
Security Operations and monitoring capabilities need expansion, particularly in pre-built monitoring applications and dashboard customization.
 

Devo Pros review quotes

FR
Strategic Account Executive at a computer software company with 51-200 employees
Oct 22, 2025
The drill-down reports capabilities allow analysts to click on any element in a widget. When they see a spike in a line chart for a failed login, which could be a true or false attempt, they can click that spike, and a table widget on the same active board instantly populates with raw logs of data for those specific failed logins.
Michael Wenn - PeerSpot reviewer
CEO / Co-Founder at Aiops ltd
Aug 2, 2024
It centralizes security management within a business, functioning as a core system for a SOC.
JB
Security Engineer at Kforce
Oct 7, 2022
The most useful feature for us, because of some of the issues we had previously, was the simplicity of log integrations. It's much easier with this platform to integrate log sources that might not have standard logging and things like that.
Learn what your peers think about Devo. Get advice and tips from experienced pros sharing their opinions. Updated: May 2026.
893,221 professionals have used our research since 2012.
reviewer1991436 - PeerSpot reviewer
IT Risk Manager at a recreational facilities/services company with 501-1,000 employees
Oct 14, 2022
The alerting is much better than I anticipated. We don't get as many alerts as I thought we would, but that nobody's fault, it's just the way it is.
KG
Director of World Wide Security Services at Open Text
Dec 7, 2021
Devo helps us to unlock the full power of our data because they have more than 450 parsers, which means that we can ingest pretty much any type of log data.
it_user1689402 - PeerSpot reviewer
Product Director at a insurance company with 10,001+ employees
Oct 7, 2021
Those 400 days of hot data mean that people can look for trends and at what happened in the past. And they can not only do so from a security point of view, but even for operational use cases. In the past, our operational norm was to keep live data for only 30 days. Our users were constantly asking us for at least 90 days, and we really couldn't even do that. That's one reason that having 400 days of live data is pretty huge. As our users start to use it and adopt this system, we expect people to be able to do those long-term analytics.
reviewer1539015 - PeerSpot reviewer
Director at a security firm with 51-200 employees
Jul 17, 2023
Scalability is one of Devo's strengths.
it_user1710261 - PeerSpot reviewer
CEO at Analytica 42
Nov 30, 2021
Devo provides a multi-tenant, cloud-native architecture. This is critical for managed service provider environments or multinational organizations who may have subsidiaries globally. It gives organizations a way to consolidate their data in a single accessible location, yet keep the data separate. This allows for global views and/or isolated views restricted by access controls by company or business unit.
reviewer1685601 - PeerSpot reviewer
Digital Security VP at a tech services company with 201-500 employees
Oct 1, 2021
In traditional BI solutions, you need to wait a lot of time to have the ability to create visualizations with the data and to do searches. With this kind of platform, you have that information in real-time.
it_user1610094 - PeerSpot reviewer
Cyber Security Engineer at H&R Block, Inc.
Jun 23, 2021
The most valuable feature is definitely the ability that Devo has to ingest data. From the previous SIEM that I came from and helped my company administer, it really was the type of system where data was parsed on ingest. This meant that if you didn't build the parser efficiently or correctly, sometimes that would bring the system to its knees. You'd have a backlog of processing the logs as it was ingesting them.
 

Devo Cons review quotes

FR
Strategic Account Executive at a computer software company with 51-200 employees
Oct 22, 2025
The tools in Devo's active ports need enhancement in their investigative capabilities.
Michael Wenn - PeerSpot reviewer
CEO / Co-Founder at Aiops ltd
Aug 2, 2024
They can improve their AI capabilities
JB
Security Engineer at Kforce
Oct 7, 2022
Some of the documentation could be improved a little bit. A lot of times it doesn't go as deep into some of the critical issues you might run into. They've been really good to shore us up with support, but some of the documentation could be a little bit better.
Learn what your peers think about Devo. Get advice and tips from experienced pros sharing their opinions. Updated: May 2026.
893,221 professionals have used our research since 2012.
reviewer1991436 - PeerSpot reviewer
IT Risk Manager at a recreational facilities/services company with 501-1,000 employees
Oct 14, 2022
There are some issues from an availability and functionality standpoint, meaning the tool is somewhat slow. There were some slow response periods over the past six to nine months, though it has yet to impact us terribly as we are a relatively small shop. We've noticed it, however, so Devo could improve the responsiveness.
KG
Director of World Wide Security Services at Open Text
Dec 7, 2021
We only use the core functionality and one of the reasons for this is that their security operation center needs improvement.
it_user1689402 - PeerSpot reviewer
Product Director at a insurance company with 10,001+ employees
Oct 7, 2021
One major area for improvement for Devo... is to provide more capabilities around pre-built monitoring. They're working on integrations with different types of systems, but that integration needs to go beyond just onboarding to the platform. It needs to include applications, out-of-the-box, that immediately help people to start monitoring their systems. Such applications would include dashboards and alerts, and then people could customize them for their own needs so that they aren't starting from a blank slate.
reviewer1539015 - PeerSpot reviewer
Director at a security firm with 51-200 employees
Jul 17, 2023
My opinion on the solution's technical support is not as great as it could be because of the issues I have faced regarding the service management element.
it_user1710261 - PeerSpot reviewer
CEO at Analytica 42
Nov 30, 2021
Some basic reporting mechanisms have room for improvement. Customers can do analysis by building Activeboards, Devo’s name for interactive dashboards. This capability is quite nice, but it is not a reporting engine. Devo does provide mechanisms to allow third-party tools to query data via their API, which is great. However, a lot of folks like or want a reporting engine, per se, and Devo simply doesn't have that. This may or may not be by design.
reviewer1685601 - PeerSpot reviewer
Digital Security VP at a tech services company with 201-500 employees
Oct 1, 2021
I would like to have the ability to create more complex dashboards.
it_user1610094 - PeerSpot reviewer
Cyber Security Engineer at H&R Block, Inc.
Jun 23, 2021
From our experience, the Devo agent needs some work. They built it on top of OS Query's open-source framework. It seems like it wasn't tuned properly to handle a large volume of Windows event logs. In our experience, there would definitely be some room for improvement. A lot of SIEMs on the market have their own agent infrastructure. I think Devo's working towards that, but I think that it needs some improvement as far as keeping up with high-volume environments.