| What it sells |
|---|
| What it sells | - ThreatStream Next-Gen[2]A product that enriches a security data lake with threat intelligence on actors, infrastructure and campaigns.
- Anomali Data LakeA data lake that normalizes and stores telemetry from cloud, endpoint, network and identity tools for search and correlation.
- AURA[1]An agent that triages and investigates security alerts and recommends actions, with consequential actions awaiting human approval by default.
| - Cribl Stream[1]A data pipeline that collects, reduces, enriches and routes telemetry data from any source to any destination tool.
- Cribl Lake[2]A managed data lake that stores, retrieves and analyzes IT and security telemetry.
- Cribl SearchA query engine that searches data across Cribl Lake and cloud storage destinations such as Amazon S3 and Azure Blob.
| - Security Data Platform[3]Devo lists the Security Data Platform. It is described as purpose-built for a SOC.
- Data Analytics Cloud[3]Devo lists a Data Analytics Cloud. It is described as data-agnostic, real-time analytics.
- Devo for Security[3]Devo for Security is described as automation to handle data and analytics at any scale.
- Devo for IT[3]Devo for IT is described as scalable solutions to unify data, reduce costs and drive operational excellence.
| - MarsA platform that lets security teams hunt across log sources, cloud and endpoint data and build and test detections without building ingestion pipelines.
|
|---|
| Categories |
|---|
| Categories | | | | |
|---|
| Headquarters |
|---|
| Headquarters | Redwood City, United States[2] | San Francisco, United States | Cambridge, United States[2] | Not stated on its pages |
|---|
| Founded |
|---|
| Founded | Not stated on its pages | 2018[3] | Not stated on its pages | Not stated on its pages |
|---|
| Ownership and funding |
|---|
| Ownership and funding | Not stated on its pages | Privately held | Privately held[2][3] | Not stated on its pages |
|---|
| Named customers |
|---|
| Named customers | Not stated on its pages | Not stated on its pages | Not stated on its pages | Not stated on its pages |
|---|
| Recent news |
|---|
| Recent news | Not stated on its pages | Not stated on its pages | Not stated on its pages | Not stated on its pages |
|---|
| G2 and Gartner Peer Insights |
|---|
| G2 and Gartner Peer Insights | - G2: listed, seen October 23, 2026[4]
- Gartner Peer Insights: listed, seen October 23, 2026[5]
| - G2: Not stated on its pages
- Gartner Peer Insights: Not stated on its pages
| - G2: Not stated on its pages
- Gartner Peer Insights: Not stated on its pages
| - G2: Not stated on its pages
- Gartner Peer Insights: Not stated on its pages
|
|---|
| Who it fits |
|---|
| Who it fits | From its own pages, the company sells mainly to SOC and CTI teams. Its pages also list CTI Teams as a role. The marketplace lets buyers trial and purchase threat intelligence feeds from Anomali partners and match intelligence to their organization, industry, geography, and more. | Not written yet | From its own pages, Devo sells mainly to security operations teams, since it describes its Security Data Platform as purpose-built for a SOC. Its solution pages are named for MSSPs, Public Sector, Higher Education and Financial Services. It also lists Devo for IT, so IT teams appear to be a second audience. Its partners link says it helps partners empower their customers, so it also appears to work through partners. | Not written yet |
|---|
| Last verified |
|---|
| Last verified | September 27, 2026 | September 27, 2026 | September 27, 2026 | October 29, 2026 |
|---|