Skip to content

Devo

Devo is a Cambridge, Massachusetts-based cloud-native security data platform combining SIEM, SOAR, and UEBA to help large security teams detect and respond to threats at scale.

Visit Website ↗ + Add to Compare
68/100Incremental Innovator

Overview

Devo, founded in 2011 (originally as Logtrust, rebranded to Devo in 2017) and headquartered in Cambridge, Massachusetts, builds a cloud-native, real-time security data platform. It ingests and analyzes high volumes of logs and telemetry and layers SIEM, security orchestration and automated response (SOAR), and user and entity behavior analytics (UEBA) on top, positioning itself as infrastructure for what it calls the "autonomous SOC" — reducing the manual query and correlation burden on security analysts as data volumes grow.

Devo has raised more than $410 million across multiple rounds, most recently a $100 million Series F led by Eurazeo in 2022 that valued the company at $2 billion, up from $1.5 billion after its prior $250 million Series E. With roughly 500 employees, it competes directly against established SIEM vendors like Splunk and Microsoft Sentinel and newer cloud-native entrants, differentiating primarily on query speed and cost efficiency at large data volumes. Its recent integration with MSSP DeepSeas, which is building Devo into its own data-lake platform for midmarket and enterprise clients, extends its reach into the managed-services channel.

For CISOs evaluating a SIEM replacement or consolidation of SIEM/SOAR/UEBA into a single data platform, Devo is a credible, well-capitalized option, particularly for organizations prioritizing query performance against large log volumes. As with most SIEM-category vendors, independent adversarial testing (e.g., MITRE ATT&CK-style evaluations) is not part of its public evidence base, so efficacy claims rest primarily on customer references and partner integrations rather than third-party red-team results.

Innovation Matrix Assessment

Innovation Velocity 7/10

Devo has steadily expanded its cloud-native platform to combine SIEM, SOAR, and UEBA and has previewed next-generation cloud SIEM capabilities aimed at an 'autonomous SOC' concept, reflecting a consistent, if incremental rather than category-inventing, product cadence.

Operational Value 8/10

With roughly 500 employees, more than $410 million raised, and a $2 billion valuation as of its 2022 Series F, Devo operates with substantial scale and capital relative to most companies in this category.

Market Momentum 6/10

Devo's most recent major funding milestone was its 2022 Series F; more recent momentum comes from channel expansion such as its integration into MSSP DeepSeas's data-lake platform rather than a fresh funding or valuation event, suggesting steady rather than accelerating momentum.

Category Disruption 6/10

Consolidating SIEM, SOAR, and UEBA into a single cloud-native, high-speed query platform is a real modernization of the security data stack, but Devo competes in a crowded field against Splunk, Microsoft Sentinel, and other cloud-native SIEM entrants rather than defining an entirely new category.

Real-World Efficacy 6/10

Devo's integration into DeepSeas's managed security data-lake platform is an independently reported, verifiable partnership that implies real technical validation by a third-party MSSP; however, no public MITRE ATT&CK-style adversarial evaluation of Devo was found, which is typical for SIEM/data-platform vendors but limits independently-verified efficacy evidence.

Enduring Relevance 8/10

SIEM, SOAR, and UEBA remain core building blocks of enterprise security operations, and the pressure to reduce analyst query burden as log volumes grow makes Devo's query-speed and cost-efficiency positioning directly relevant to current SOC priorities.

Why CISOs Should Care

Security operations leaders consolidating SIEM, SOAR, and UEBA tooling or hitting cost and performance limits with legacy SIEM at high data volumes get a well-capitalized, cloud-native alternative built specifically for query speed at scale.

What Makes It Different

Devo differentiates on real-time query performance against very large data volumes and a unified SIEM/SOAR/UEBA architecture, rather than bolting behavior analytics onto a traditional log-indexing SIEM.

The Matrix Verdict

68/100 — INCREMENTAL INNOVATOR

A well-funded, credible cloud-native SIEM/SOAR/UEBA platform with genuine scale and channel traction, competing in a crowded field where its main differentiation is query performance and cost efficiency rather than a fundamentally new detection approach.

Editorial Note: Claims vs. Verified Findings

Devo's funding totals ($410M+) and $2 billion valuation are independently reported by multiple outlets (VentureBeat, Finsmes, TechStartups) and confirmed by the company's own newsroom, so these figures are independently verifiable. Specific performance and query-speed claims on Devo's marketing site are vendor-stated and were not independently benchmarked as part of this research.

Sources