CISO Tribune

Vendor comparison · 2 companies

Devo vs Exabeam

Devo sells a security data platform that replaces traditional SIEMs and includes data-powered SIEM, SOAR and UEBA. Exabeam sells security operations software for threat detection, investigation and response (TDIR), including cloud-native SIEM, behavioral analytics and an on-premises SIEM platform. CISO Tribune files both under SIEM. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Devo
  • Exabeam
Devo vs Exabeam: Products, Customers and Funding Compared
DevoDevo sells a security data platform that replaces traditional SIEMs and includes data-powered SIEM, SOAR and UEBA.devo.comExabeamExabeam sells security operations software for threat detection, investigation and response (TDIR), including cloud-native SIEM, behavioral analytics and an on-premises SIEM platform.exabeam.com
What it sells
  • Security Data Platform[3][4][6]Devo's integrated platform includes data-powered SIEM, SOAR, and UEBA.
  • Devo DeepTrace[6]Devo DeepTrace supports autonomous investigations and threat hunting.
  • Devo ThreatLink[5]Devo ThreatLink automates alert triage.
  • Professional Services[3][8]Devo offers implementation services and expert services.
  • New-Scale Fusion[1][5][9]A cloud-native platform combining New-Scale SIEM and New-Scale Analytics.
  • New-Scale SIEM[5][9]A cloud-native SIEM with search, correlation and AI co-investigation in a TDIR workbench.
  • Exabeam Nova[1][5][9]A platform-wide co-investigator for analysts.
  • Outcomes Navigator[5][9]Maps data to use cases and frameworks.
  • LogRhythm SIEM[5][11][12]An on-premises SIEM platform.
  • LogRhythm Intelligence[5][12]An add-on bringing behavioral analytics to LogRhythm SIEM.
  • NetMon[13]Network traffic monitoring for LogRhythm or New-Scale deployments.
Categories
Headquarters
Cambridge, United States[2]Foster City, United States[4]
Founded
Not stated on its pages2013[2]
Ownership and funding
Privately held[2][3][12]Owned by Thoma Bravo since 2024[5][7][8]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pages
  • October 1, 2026Exabeam introduced new Agentic SOC capabilities that bring AI-driven investigation, execution, and governance to cloud and on-premises environments.[15]
  • July 1, 2026Exabeam expanded its Behavior Intelligence capabilities to help organizations secure AI agents, autonomous workflows, and human-to-agent interactions.[6]
  • June 23, 2026Exabeam introduced Agent Behavior Verification and released Praxen, an open-source tool that tests an AI agent against its intended role before deployment.[16]
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: listed, seen November 5, 2026[12]
  • G2: Not stated on its pages
  • Gartner Peer Insights: listed, seen November 3, 2026[8]
Who it fits
From its own pages, Devo sells mainly to SOC teams and security organizations. Devo also addresses educational institutions and names a managed services IT and cybersecurity provider among its customers. Devo's migration services are aimed at organizations that are switching SIEMs. Devo's professional services are aimed at security experts and IT innovators.Exabeam says its platform helps organizations of any size and maturity. Exabeam offers a cloud-native platform and an on-premises SIEM, so it addresses both cloud and self-hosted deployment preferences. Its pages describe replacing a legacy SIEM or augmenting an existing one with behavioral analytics and automation. Exabeam also targets organizations concerned with insider threats from both human users and AI agents.
Last verified
September 27, 2026September 27, 2026

Where they overlap

  • Devo and Exabeam are both filed under SIEM.
  • Both are headquartered in the United States.

Where they differ, field by field

  • Devo's primary category is Security data lakes and pipelines; Exabeam's is SIEM.
  • Devo is also filed under SOAR and security automation. Exabeam is also filed under AI SOC analysts.
  • Devo lists Security Data Platform, Devo DeepTrace, Devo ThreatLink and Professional Services. Exabeam lists New-Scale Fusion, New-Scale SIEM, Exabeam Nova, Outcomes Navigator, LogRhythm SIEM and 2 more.
  • Devo is headquartered in Cambridge, United States. Exabeam is headquartered in Foster City, United States.
  • Exabeam was founded in 2013.
  • Devo is privately held. Exabeam is owned by Thoma Bravo, since 2024.

What it sells: Devo

What Security Data Platform does[3][4][6]
Devo says its integrated platform includes data-powered SIEM, SOAR and UEBA. Devo says the platform ingests data from a wide range of sources and keeps it hot and in its original form. Devo says its pricing is based on ingest, with one license metric.
What Devo DeepTrace does[6]
Devo says Devo DeepTrace helps security teams autonomously investigate alerts and suspicious events and perform threat hunting. Investigations can be started with a single click from the Devo Security Data Platform. Devo says it maps evidence against the MITRE ATT&CK framework.
What Devo ThreatLink does[5]
Devo says Devo ThreatLink correlates and enriches alerts into high-fidelity cases. Devo says this reduces thousands of alerts to tens of cases per day.
What Professional Services does[3][8]
Devo says its implementation services are tailored to each customer's data sources and use cases. Devo's expert services cover optimizing data management and developing custom content, including detections, analytics and automation playbooks.

What it sells: Exabeam

What New-Scale Fusion does[1][5][9]
New-Scale Fusion unifies log management, behavioral analytics, dynamic risk scoring and automation in a modular platform. It can replace an existing SIEM or augment current tools. It runs on Google Cloud Platform.
What New-Scale SIEM does[5][9]
New-Scale SIEM combines fast search, advanced correlation and persistent AI co-investigation in a unified TDIR workbench. Threat Center unifies alerts, cases, detections and watchlists. New-Scale SIEM is delivered from GCP.
What Exabeam Nova does[1][5][9]
Exabeam Nova follows analysts through Threat Center, search timelines and Outcomes Navigator. It automates background context collection, secondary searches and triage assistance.
What LogRhythm SIEM does[5][11][12]
LogRhythm SIEM is deployed on-premises for complete data control. It includes 1,100+ prebuilt correlation rules mapped to MITRE ATT&CK and compliance mandates.
What LogRhythm Intelligence does[5][12]
LogRhythm Intelligence applies AI-driven behavioral analytics to surface user and entity anomalies in the LogRhythm SIEM platform. It is an add-on to LogRhythm SIEM and not available as a standalone product.

Questions about Devo and Exabeam

What do Devo and Exabeam sell?
Devo sells Security Data Platform, Devo DeepTrace, Devo ThreatLink and Professional Services. Exabeam sells New-Scale Fusion, New-Scale SIEM, Exabeam Nova, Outcomes Navigator, LogRhythm SIEM and 2 more.
Are Devo and Exabeam in the same category?
They share SIEM. Devo's primary category is Security data lakes and pipelines and Exabeam's is SIEM.
Where are Devo and Exabeam headquartered?
Devo is headquartered in Cambridge, United States. Exabeam is headquartered in Foster City, United States.
When were Devo and Exabeam founded?
Exabeam was founded in 2013.
Who owns Devo and Exabeam?
Devo is privately held. Exabeam is owned by Thoma Bravo, since 2024.
Who are Devo and Exabeam sold to?
From its own pages, Devo sells mainly to SOC teams and security organizations. Exabeam says its platform helps organizations of any size and maturity.
What have Devo and Exabeam announced recently?
October 1, 2026: Exabeam introduced new Agentic SOC capabilities that bring AI-driven investigation, execution, and governance to cloud and on-premises environments.

About Devo

Devo sells a security data platform that replaces traditional SIEMs and includes data-powered SIEM, SOAR and UEBA. Devo says AI and intelligent automation help a SOC make the right decisions in real time. Devo also says its platform delivers 100% data source coverage together with integrated SIEM, SOAR and UEBA.[1][4]

Devo says it offers security without limits, without complexity and without vendor lock-in. Devo states that its platform provides sub-second speed and keeps data hot and in its original form while ingesting data from a wide range of sources. Devo also states that the platform delivers streaming alerts with zero lag and full context. Devo describes its data orchestration as a way to keep the most valuable data available for real-time analytics and alerting while optimizing where less valuable data is stored.[1][5][8]

Devo ThreatLink automates alert triage by correlating and enriching alerts into high-fidelity cases, reducing thousands of alerts to tens of cases per day. Devo DeepTrace helps security teams autonomously investigate alerts and suspicious events and perform threat hunting. Devo says DeepTrace uses attack-tracing AI to investigate suspicious activity, and that it maps evidence against the MITRE ATT&CK framework tactics and techniques. Devo DeepTrace lets teams construct and configure new hunts from a pre-configured set without needing specialized expertise. Devo says its customers can start single-click investigations from the Devo Security Data Platform.[5][6]

Devo says AI Assist inside the Devo Platform is being migrated to Prospector Studio. Devo says it has enhanced the capabilities of AI Assist into multiple agents.[7]

Devo says its pricing is based on ingest, with one platform and one license metric. Devo says it has over a thousand successful enterprise deployments and a white-glove migration process established with its partners. Devo says its technical services team has helped hundreds of customers migrate successfully from legacy solutions. Devo says it has designed services to speed up migration and onboarding and to provide ongoing training. After migration and onboarding, Devo moves a customer team from its technical services team to a customer success manager. Devo says it will do all the work of migrating a SIEM at no cost.[5][8][9]

Devo offers professional services for security experts and IT innovators, aimed at enhancing visibility, reducing complexity and improving security maturity. Devo tailors its implementation services to each customer's data sources and use cases. Devo's expert services cover optimizing data management, accelerating performance and developing custom content, including detections, analytics and automation playbooks. Devo describes the Devo Learning Hub as a one-stop shop for training resources within a custom sandbox environment, and Devo Connect as the community of Devo users.[8][9]

Devo says educational institutions can use its platform to find threats with zero lag. Devo describes higher education challenges such as securing an ecosystem of students, faculty and researchers with varying requirements and behaviors. Rebecca Lambert, SOC Manager at Corsica Technologies, a managed services IT and cybersecurity provider, says Corsica Technologies implemented the Devo Platform through AWS.[9][10]

Devo says its mission is to reinvent how data and security analytics are used to empower faster, more confident action at any scale. Devo says its executive team has a combined 100+ years of building and growing cybersecurity companies. Devo says its privacy program is designed to be flexible and to respond to changing global privacy laws and regulations.[4][8][9][11]

Devo on the record

Sources

Devo full record

  1. [1]PlatformDevo · devo.com · published September 3, 2025 · Tier A
  2. [2]Devo sets company records for revenue and customer growthDevo · devo.com · published August 3, 2020 · Tier A
  3. [3]Devo: The Security Data Platform | Unified SIEM SolutionDevo · undated page, accessed October 24, 2026 · Tier A
  4. [4]About Devo - Devo.comDevo · undated page, accessed November 5, 2026 · Tier A
  5. [5]Security Data Platform Overview - Devo.comDevo · undated page, accessed November 5, 2026 · Tier A
  6. [6]Devo DeepTrace: AI-Powered Threat Hunting- Devo.comDevo · undated page, accessed November 5, 2026 · Tier A
  7. [7]AI Assist transforms into Studio | CommunityDevo · undated page, accessed November 5, 2026 · Tier A
  8. [8]Professional Services - Devo.comDevo · undated page, accessed November 5, 2026 · Tier A
  9. [9]What to Expect as a Customer - Devo.comDevo · undated page, accessed November 5, 2026 · Tier A
  10. [10]Devo for Higher Education - Devo.comDevo · undated page, accessed November 5, 2026 · Tier A
  11. [11]Trust Center - Devo.comDevo · undated page, accessed November 5, 2026 · Tier A
  12. [12]Devo Technology Reviews, Ratings & Features 2026 | Gartner Peer InsightsGartner Peer Insights · undated page, accessed November 5, 2026 · Tier C

Exabeam full record

  1. [1]Exabeam new scale fusion security operations platformExabeam · exabeam.com · published July 1, 2026 · Tier A
  2. [2]About usExabeam · exabeam.com · published September 15, 2026 · Tier A
  3. [3]Exabeam and logrhythm complete merger and announce new company detailsThoma Bravo · thomabravo.com · published July 17, 2024 · Tier B
  4. [4]Exabeam opens new office in plano tx expands customer service and support in north americaExabeam · exabeam.com · published November 3, 2022 · Tier A
  5. [5]Exabeam | Cybersecurity & Compliance with Security Log Management and SIEMExabeam · undated page, accessed October 24, 2026 · Tier A
  6. [6]Exabeam Expands Behavior Intelligence to Secure the Agentic EnterpriseBusiness Wire · published July 1, 2026 · Tier A
  7. [7]Exabeam New-Scale Platform Reviews & Product Details - G2G2 · undated page, accessed October 24, 2026 · Tier C
  8. [8]Exabeam Reviews, Ratings & Features 2026 | Gartner Peer InsightsGartner Peer Insights · undated page, accessed October 24, 2026 · Tier C
  9. [9]New-Scale SIEM | ExabeamExabeam · undated page, accessed November 3, 2026 · Tier A
  10. [10]Exabeam | Cybersecurity & Compliance with Security Log Management and SIEMExabeam · undated page, accessed November 3, 2026 · Tier A
  11. [11]LogRhythm SIEM | ExabeamExabeam · undated page, accessed November 3, 2026 · Tier A
  12. [12]LogRhythm Intelligence | ExabeamExabeam · undated page, accessed November 3, 2026 · Tier A
  13. [13]NetMon | ExabeamExabeam · undated page, accessed November 3, 2026 · Tier A
  14. [14]The Exabeam Difference | ExabeamExabeam · undated page, accessed November 3, 2026 · Tier A
  15. [15]The Agentic SOC, Delivered: Exabeam Accelerates AI-Powered Security Operations to Machine SpeedExabeam · published October 1, 2026 · Tier A
  16. [16]Exabeam launches Praxen, an open-source tool to verify AI agent behaviorSiliconANGLE · published June 23, 2026 · Tier B

Spot a factual error? Request a correction.