Devo
Devo Technology is a cloud-native security data platform combining SIEM, SOAR, and UEBA with AI automation, serving Fortune 500 enterprises, federal agencies, and MSSPs worldwide through a usage-based SaaS model and a global channel ecosystem.
- Company typePrivate
- Founded2011
- HeadquartersCambridge, United States
- Headcount101–250
- GTM typeB2B
- OfferingSoftware
What Devo does
Devo Technology Inc., founded in 2011 and headquartered in Boston, Massachusetts, is a venture-backed private cybersecurity company that sells a cloud-native security data platform combining SIEM, SOAR, and UEBA capabilities with AI-driven automation for enterprise and government security operations centers. The platform is built on a proprietary no-index ingestion architecture with schema-on-read technology that delivers sub-second query speed over petabyte-scale datasets and 400 days of always-hot data storage, supporting modules such as ThreatLink (automated case management), DeepTrace (autonomous threat hunting), Behavior Analytics (UEBA), Devo SOAR, Devo Exchange (content marketplace), and the new Strike48 Agentic Log Intelligence Platform.
Devo generates revenue primarily through enterprise SaaS subscriptions priced on data ingest per day averaged monthly, sold in packaging tiers ranging from standalone Data Analytics Cloud to Intelligent SIEM Starter and the full Intelligent SIEM. The go-to-market combines direct enterprise field sales (with a white-glove migration and professional services motion targeting Fortune 500 and federal agencies) with a structured channel ecosystem spanning MSSPs (CyberMaxx, DeepSeas, Talion, Capgemini, HCL Tech), global systems integrators, hyperscaler marketplaces (notably AWS Marketplace with Security Services Competency), and a broad technology alliance network. Verticals served include financial services, telecommunications, public sector (FedRAMP Moderate and StateRAMP authorized), tech/SaaS, higher education, healthcare, retail, and MSSPs, with operations spanning the US, Spain, Singapore, Australia, and India.
The company has raised over $500 million across multiple funding rounds led by Insight Partners, Georgian, TCV, and Eurazeo, reaching a $2 billion valuation in June 2022; completed two acquisitions in 2022 (Kognos and LogicHub) to deepen autonomous SOC and SOAR capabilities; appointed Ken Naumann as CEO in March 2025; and launched Strike48 in January 2026 as an agentic-AI platform for security and IT operations. External validations include 2024 Gartner Magic Quadrant Visionary for SIEM, IDC MarketScape Leader for Worldwide SIEM, GigaOm Leader and Fast Mover for SIEM and Autonomous SOC, AWS Security Services Competency, ISO 27001, and CRN Cloud 100 and Security 100 recognition.
Devo firmographics
Firmographics- Name
- Devo
- Legal name
- Devo Technology Inc.
- Website
- https://devo.com
- Company type
- Private
- Founded year
- 2011
- Operating status
- Operating
- Headcount range
- 101–250 employees
- Short description
- Devo Technology is a cloud-native security data platform combining SIEM, SOAR, and UEBA with AI automation, serving Fortune 500 enterprises, federal agencies, and MSSPs worldwide through a usage-based SaaS model and a global channel ecosystem.
- Ownership category
- akta.pro rank
Devo industry classification
Industry- Product category
- Security Data Platform / SIEM
- NAICS
- Software Publishers (513210)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Attack Detection & Response for Cloud/SaaS (SOC for Cloud) (HDADAGAJ)
Keywords
Where Devo is headquartered
LocationHeadquarters
- HQ city
- Cambridge
- HQ country
- United States
- HQ region
- North America
Offices5 records
Markets served
Devo business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Security Data Platform SaaS Subscription: Devo operates as a SaaS (Software-as-a-Service) provider offering its security data platform on a subscription basis. Pricing is based on data ingest per day, averaged monthly — a predictable, usage-based model with no additional per-seat costs, no module add-ons, and no surprise licensing fees. The platform is offered in packaging tiers including Data Analytics Cloud (standalone or bundled), Intelligent SIEM Starter, and Intelligent SIEM.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Usage-based | Monthly | Data Analytics Cloud — Standalone data analytics cloud for orchestrating and ingesting data from any source. |
| Subscription | Annual | Intelligent SIEM Starter — Entry-level cloud-native SIEM with SOAR starter and ThreatLink case management. |
| Subscription | Annual | Intelligent SIEM — Unlimited SIEM, SOAR, and AI capabilities built on Data Analytics Cloud. |
Go-to-market motion3 records
Distribution channels5 records
Marketing channels15 records
Devo product offering
Product offeringCore offering
Devo provides a cloud-native security data platform that unifies SIEM, SOAR, and UEBA capabilities on a single Data Analytics Cloud foundation. The platform ingests and analyzes structured and unstructured data from any source at petabyte scale, delivering sub-second query performance and AI-powered automation for threat detection, case management, and autonomous investigations. It is offered as a SaaS subscription with usage-based pricing tied to daily data ingest.
Product overview
Devo offers a unified Security Data Platform architecture combining multiple integrated products and modules. The core consists of the Devo Security Data Platform (built on Data Analytics Cloud) with integrated Intelligent SIEM, SOAR, and UEBA capabilities. Key modules include Devo ThreatLink (automated case management), DeepTrace (autonomous investigations and threat hunting), Behavior Analytics (UEBA anomaly detection), and Devo Exchange (content marketplace). The company also provides Strike48 as a separate Agentic AI log intelligence product brand. Solutions are available as standalone packages or integrated bundles, with vertical-specific offerings for MSSPs, Public Sector, Financial Services, Tech/SaaS, Higher Education, Telecommunications, and IT Operations. Pricing is based on data ingest per day, averaged monthly, with options ranging from Data Analytics Cloud standalone to Intelligent SIEM Starter to full Intelligent SIEM with unlimited functionality.
Differentiator
Problem solved
Functional benefit
Brands
- Strike48: First Agentic Log Intelligence Platform designed to eliminate visibility gaps that limit AI agents in security and IT operations.
Products and services
- Devo Security Data Platform Cloud-native security data platform that serves as the foundation for security operations, combining SIEM, SOAR, and UEBA capabilities with AI and intelligent automation for real-time threat detection, automated case management, and autonomous investigations. Targeted at enterprise SOC teams and security leaders.
Quantifiable outcome
- 9x reduction in total cost of ownership vs. legacy SIEM solutions
- +17 more outcomes
Companies that use Devo
Customer profileNamed customers32 records
Segments7 records
Ideal customer profiles4 records
Devo technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration22 records
AI capability9 records
Feature10 records
Devo partnerships and signals
Strategic signalPartnerships
Nine partnerships are on record, tiered core and minor.
- OptuscoreOptus announced a strategic partnership with Devo Technology in August 2025 to launch a 24/7 Managed Threat Monitoring Service. The partnership aims to bolster enterprise security analytics and threat detection for Optus business customers in Australia.
- AWS (Amazon Web Services)coreAWS is a key technology alliance partner. Devo is available on AWS Marketplace and holds the AWS Security Services Competency. The partnership enables joint go-to-market activities, with Devo leveraging AWS's customer base for cloud shift and SOC transformation initiatives. Devo customers can deploy through AWS infrastructure.
- CyberMaxxcoreCyberMaxx is an MSSP partner delivering managed security services powered by Devo's platform. CyberMaxx uses Devo's multi-tenant capabilities to configure custom alerts across customer environments and correlate data for multiple customers in a single pane for enhanced visibility.
- DeepSeascoreDeepSeas is an MSSP partner that leverages Devo's platform for security operations. The partnership provides flexibility for clients to customize content and maintain their own detection capabilities while benefiting from Devo's templates and scalable architecture.
- TalioncoreTalion is an MSSP partner that delivers managed security services using Devo's platform. Talion's COO cited the collaborative nature of working within the Devo platform as a key benefit for both the partner and end customers.
- CapgeminicoreCapgemini is a global systems integrator and consulting firm that partners with Devo to deliver security transformation projects to enterprise customers. The partnership leverages Capgemini's global delivery capabilities.
- SingtelminorSingtel is a telecommunications company and MSSP partner in the Asia-Pacific region that delivers managed security services powered by Devo's platform.
- Tokyo Electron DeviceminorTokyo Electron Device is a technology distributor and partner in Japan that resells and integrates Devo's security platform for enterprise customers in the region.
- HCL TechcoreHCL Tech is a global technology services company and strategic partner that integrates Devo's security data platform into its managed security and consulting offerings for enterprise clients.
Scale indicators10 records
Recent moves6 records
Devo competitors and assessment
Company assessmentDirect peers
- Splunk (Cisco): Splunk is the dominant legacy SIEM platform and Devo's most frequently cited direct competitor. Now owned by Cisco, Splunk offers comparable log analytics, SOAR, and UEBA capabilities with index-based architecture — Devo's no-index, cloud-native value proposition is built explicitly against Splunk's pricing and performance profile.
- Microsoft Sentinel: Microsoft Sentinel is a cloud-native SIEM native to the Azure ecosystem and one of Devo's named direct competitors. Sentinel's strength in Microsoft-centric environments (and Devo's Devo+Sentinel integration) frames Sentinel as a frequent head-to-head alternative for enterprises evaluating cloud-native SIEM.
- Google Chronicle (now Google Security Operations): Google Chronicle is a hyperscaler-native SIEM/SOAR platform that competes with Devo on cloud-native ingestion and search at petabyte scale. Devo's value proposition explicitly differentiates against Chronicle on multi-cloud and non-native data source coverage.
- Elastic Security: Elastic Security combines SIEM, endpoint security, and observability on the Elastic Search platform, serving similar enterprise security analytics use cases as Devo. Elastic's open underlying stack and pricing model are a common Devo alternative for cost-sensitive enterprise buyers.
- Sumo Logic: Sumo Logic is a cloud-native SaaS log management and security analytics platform offering SIEM and SOAR capabilities. As a born-in-the-cloud peer with a similar ingest-pricing model, Sumo Logic competes head-to-head with Devo for mid-market and enterprise log analytics and security workloads.
- Exabeam: Exabeam offers a cloud-native SIEM with strong UEBA and AI-driven threat detection capabilities. Exabeam is one of the most frequently compared alternatives to Devo in the modern cloud-native SIEM category, including on AI-based automation.
- Securonix: Securonix is a cloud-native SIEM provider with strong UEBA and managed detection capabilities, frequently competing with Devo in Fortune 500 and federal security analytics deals. Both vendors emphasize cloud-native architecture and AI-driven SOC automation.
Broad incumbents
- IBM QRadar SIEM: IBM QRadar is a long-standing incumbent SIEM with deep installed base in regulated and government sectors. Devo positions its no-index cloud-native architecture and predictable pricing against QRadar's traditional on-prem footprint and complex licensing.
- Rapid7: Rapid7 offers an integrated security analytics platform combining SIEM, vulnerability management, and SOAR. As a broader security platform, Rapid7 overlaps with Devo's SOC analytics use cases while extending into adjacent vulnerability and exposure management workflows.
- CrowdStrike Falcon LogScale (formerly Humio): CrowdStrike Falcon LogScale (formerly Humio) provides cloud-native log management and security analytics integrated into the broader CrowdStrike Falcon platform. It competes with Devo on high-ingest log analytics, with CrowdStrike's broader XDR/EDR platform providing bundled competition.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat7 records
Key risks6 records
Key highlights7 records
Customer concentration
Devo social profiles
Digital presenceDevo compliance and trust
Trust signalCompliance3 records
Devo financial estimates
Financial estimateRevenue estimate
Valuation estimate
Devo leadership team
Management profileNumber of profiles
Profiles6 records
Devo funding detail
Funding detailFunding overview
Funding rounds7 records
Investors10 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Devo M&A and investment
M&A and investmentM&A2 records
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Devo
What does Devo do?
Devo provides a cloud-native security data platform that unifies SIEM, SOAR, and UEBA capabilities on a single Data Analytics Cloud foundation. The platform ingests and analyzes structured and unstructured data from any source at petabyte scale, delivering sub-second query performance and AI-powered automation for threat detection, case management, and autonomous investigations. It is offered as a SaaS subscription with usage-based pricing tied to daily data ingest.
Is Devo a public or private company?
Devo is a private company. It is classified as venture growth investor backed and is currently operating.
When was Devo founded?
Devo was founded in 2011. It employs 101 to 250 people.
Where is Devo based?
Devo is headquartered in Cambridge, United States, in the North America region.
How does Devo make money?
One revenue line is on record: security Data Platform SaaS Subscription.
Who are Devo's main competitors?
Direct peers on record are Splunk (Cisco), Microsoft Sentinel, Google Chronicle (now Google Security Operations), Elastic Security, Sumo Logic, Exabeam and Securonix. Broad incumbents are IBM QRadar SIEM, Rapid7 and CrowdStrike Falcon LogScale (formerly Humio).
Does Devo have an API?
Yes. Devo provides open APIs that enable seamless building of custom applications, integrations, and automations. The platform supports data orchestration through APIs, self-service multitenancy via API calls for configuring customer tenants in seconds, and comprehensive API access for utmost flexibility. Documentation available at docs.devo.com. Developer documentation is at docs.devo.com.
What industry is Devo in?
Devo's product category is Security Data Platform / SIEM. Its primary akta.pro industry code is HDADAGAJ, Attack Detection & Response for Cloud/SaaS (SOC for Cloud). Its NAICS code is 513210 and its SIC code is 7372.