

Devo and Netsurion are cybersecurity platforms. While Devo is noted for its comprehensive feature set and support, Netsurion stands out for deployment ease and cost-effectiveness.
Features: Devo offers extensive analytics, customizable threat detection, and real-time monitoring. Netsurion has strong integration capabilities, streamlined dashboards, and easier network data management.
Room for Improvement: Devo could improve performance, enhance intuitive navigation, and streamline its interface. Netsurion needs better reporting features, faster issue resolution, and more detailed analytics.
Ease of Deployment and Customer Service: Devo's deployment is complex but supported with helpful customer service, though it has a steep learning curve. Netsurion is easier to deploy with efficient customer service, leading to quicker implementation.
Pricing and ROI: Devo has higher initial costs but a substantial ROI over time due to advanced features. Netsurion offers a cost-effective setup, good value for money, and satisfactory ROI.
Devo gives value to the end user and is saving compared to other products in the same category.
In terms of return on investment with Devo, I'd say it has been costly due to the need for support and the overtime required for issues experienced at the beginning of the project.
We achieve early identification of security incidents that could potentially breach the customer environment, which would have been costly.
I rate the customer support a nine out of ten because of their timely technical guidance and responsiveness during the deployment and troubleshooting periods.
Both response time and support quality need attention.
Technical support from Devo is helpful.
Devo is a unified SIEM solution designed to handle growing log volumes and enterprise-scale monitoring requirements.
Devo's scalability has its challenges.
Regarding Devo's scalability, its horizontal scalability is quite good with no significant hassle.
It is stable and reliable for our security operations.
It's hard for us to keep pace since our original use case was 250 to 500 megabytes a day, and then it became two terabytes a day.
Integrating custom parsing and mapping for non-standard logs is essential due to compatibility challenges with various technologies.
This is particularly evident when dealing with failed login attempts and determining true versus false positives.
The pricing could be simpler, and while the initial setup cost for a new instance is a bit expensive, the licensing can currently be user-based or driven by log volume, which is better if there is expansion of our user base.
The pricing of the product is reasonable if we compare it with other Gartner leading products like Splunk, LogRhythm, Microsoft Sentinel, Google SecOps.
When they see a spike in a line chart for a failed login, which could be a true or false attempt, they can click that spike, and a table widget on the same active board instantly populates with raw logs of data for those specific failed logins.
When the analyst uses queries to search, it pulls the data quickly, in a second, which aids us greatly with the investigation.
It utilizes 400 days of hot data, allowing queries to run very fast and yield results quicker than other tools in terms of security and SIEM capability.
| Product | Mindshare (%) |
|---|---|
| Devo | 1.2% |
| Netsurion | 0.9% |
| Other | 97.9% |


| Company Size | Count |
|---|---|
| Small Business | 11 |
| Midsize Enterprise | 6 |
| Large Enterprise | 15 |
| Company Size | Count |
|---|---|
| Small Business | 10 |
| Midsize Enterprise | 7 |
| Large Enterprise | 7 |
Devo offers powerful visual analytics, real-time data querying, and log integration capabilities within a cloud-native, multi-tenant architecture, supporting extended data retention ideal for long-term analysis and compliance.
Devo is recognized for its Activeboards, which facilitate visual analytics. High-speed search capabilities and real-time analytics enable efficient data manipulation and querying. Its multi-tenant architecture supports effective data segregation and customization tailored to distinct business needs, enhancing its value for handling complex log integrations. With extended data retention of 400 days and a cloud-native architecture, Devo is a robust platform for long-term analysis and compliance requirements. Though opportunities exist to improve browser stability on large searches, SOAR integrations, and its parser capabilities, Devo remains essential for incident response and security monitoring, offering centralized data storage and analysis.
What are Devo's most important features?Devo is extensively used in industries focused on incident response and digital forensics, centralizing data for security monitoring across hybrid environments. Organizations benefit from its ability to store and analyze aggregated logs, creating alerts and dashboards to enhance visibility for network and endpoint activities in multi-domain settings.
Netsurion offers real-time alerts, weekly reports, and a user-friendly interface, facilitating security event visibility and threat detection. Its capabilities include seamless platform integration, quick setup, 24/7 SOC monitoring, and fast data retrieval via Elasticsearch.
Netsurion enhances IT security by providing centralized log management, abnormal activity alerts, and compliance reports. Users often employ it for VPN monitoring, firewall scrutiny, and vulnerability assessment. The system's frequent updates ensure effective cybersecurity management, while its managed SOC service supports ongoing threat monitoring and response. Despite its strengths, users suggest improvements in interface simplicity, report generation speed, and search functionalities.
What are Netsurion's key features?Netsurion is implemented across diverse industries to provide comprehensive security monitoring and compliance management. Companies use it to gather and analyze log data, manage firewall activities, assess vulnerabilities, and facilitate event logging. This aids in enhancing security posture and ensuring compliance with industry standards.
We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.