CISO Tribune

Vendor comparison · 4 companies

Anomali, Cribl, Devo and Mars Security

Change the companies

Up to four companies side by side.

  • Anomali
  • Cribl
  • Devo
  • Mars Security

Four is the most one page holds. Remove or swap a company to add another.

Swipe the table sideways to see every company.

Anomali, Cribl, Devo and Mars Security Compared
AnomaliAnomali sells a security operations platform combining a data lake, threat intelligence and AI agents that triage and investigate alerts.anomali.comCriblCribl sells a telemetry data platform for IT and security teams, including Cribl Stream, which routes and shapes data, Cribl Lake, a managed data lake for that telemetry, and Cribl Search, which queries it across storage destinations.cribl.ioDevoDevo lists a Security Data Platform and describes it as purpose-built for a SOC.devo.comMars SecurityMars Security provides a platform that lets security teams query log, cloud and endpoint data to hunt for threats and build and test detections without moving or ingesting that data into a separate pipeline.marssec.ai
What it sells
  • ThreatStream Next-Gen[2]A product that enriches a security data lake with threat intelligence on actors, infrastructure and campaigns.
  • Anomali Data LakeA data lake that normalizes and stores telemetry from cloud, endpoint, network and identity tools for search and correlation.
  • AURA[1]An agent that triages and investigates security alerts and recommends actions, with consequential actions awaiting human approval by default.
  • Cribl Stream[1]A data pipeline that collects, reduces, enriches and routes telemetry data from any source to any destination tool.
  • Cribl Lake[2]A managed data lake that stores, retrieves and analyzes IT and security telemetry.
  • Cribl SearchA query engine that searches data across Cribl Lake and cloud storage destinations such as Amazon S3 and Azure Blob.
  • Security Data Platform[3]Devo lists the Security Data Platform. It is described as purpose-built for a SOC.
  • Data Analytics Cloud[3]Devo lists a Data Analytics Cloud. It is described as data-agnostic, real-time analytics.
  • Devo for Security[3]Devo for Security is described as automation to handle data and analytics at any scale.
  • Devo for IT[3]Devo for IT is described as scalable solutions to unify data, reduce costs and drive operational excellence.
  • MarsA platform that lets security teams hunt across log sources, cloud and endpoint data and build and test detections without building ingestion pipelines.
Categories
Headquarters
Redwood City, United States[2]San Francisco, United StatesCambridge, United States[2]Not stated on its pages
Founded
Not stated on its pages2018[3]Not stated on its pagesNot stated on its pages
Ownership and funding
Not stated on its pagesPrivately heldPrivately held[2][3]Not stated on its pages
Named customers
Not stated on its pagesNot stated on its pagesNot stated on its pagesNot stated on its pages
Recent news
Not stated on its pagesNot stated on its pagesNot stated on its pagesNot stated on its pages
G2 and Gartner Peer Insights
  • G2: listed, seen October 23, 2026[4]
  • Gartner Peer Insights: listed, seen October 23, 2026[5]
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, the company sells mainly to SOC and CTI teams. Its pages also list CTI Teams as a role. The marketplace lets buyers trial and purchase threat intelligence feeds from Anomali partners and match intelligence to their organization, industry, geography, and more.Not written yetFrom its own pages, Devo sells mainly to security operations teams, since it describes its Security Data Platform as purpose-built for a SOC. Its solution pages are named for MSSPs, Public Sector, Higher Education and Financial Services. It also lists Devo for IT, so IT teams appear to be a second audience. Its partners link says it helps partners empower their customers, so it also appears to work through partners.Not written yet
Last verified
September 27, 2026September 27, 2026September 27, 2026October 29, 2026

About Anomali

Anomali sells a security operations platform combining a data lake, threat intelligence and AI agents that triage and investigate alerts. It is headquartered in Redwood City, California, with offices across Europe, the Middle East and Asia Pacific.[1]

Anomali on the record

Sources

Anomali full record

  1. [1]anomali.comAnomali · anomali.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]Anomali launches threatstream next gen to turn intelligence into action at the speed threats demandAnomali · anomali.com · published May 5, 2026 · Tier A
  3. [3]Anomali | Agentic SOC Platform for Governed Security ActionAnomali · undated page, accessed October 23, 2026 · Tier A
  4. [4]Anomali Security Analytics Reviews 2026: Details, Pricing, & Features | G2G2 · undated page, accessed October 23, 2026 · Tier C
  5. [5]Anomali Reviews, Ratings & Features 2026 | Gartner Peer InsightsGartner Peer Insights · undated page, accessed October 23, 2026 · Tier C

Cribl full record

  1. [1]StreamCribl · cribl.io · undated page, accessed September 27, 2026 · Tier A
  2. [2]cribl.ioCribl · cribl.io · undated page, accessed September 27, 2026 · Tier A
  3. [3]Cribl announces 319m series eCribl · cribl.io · published August 27, 2024 · Tier A
  4. [4]The AI Platform for Telemetry | CriblCribl · undated page, accessed October 27, 2026 · Tier A

Devo full record

  1. [1]PlatformDevo · devo.com · published September 3, 2025 · Tier A
  2. [2]Devo sets company records for revenue and customer growthDevo · devo.com · published August 3, 2020 · Tier A
  3. [3]Devo: The Security Data Platform | Unified SIEM SolutionDevo · undated page, accessed October 24, 2026 · Tier A

Mars Security full record

  1. [1]marssec.aiMARS Security · marssec.ai · undated page, accessed October 29, 2026 · Tier A

Spot a factual error? Request a correction.