Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

Devo SOAR review

#16 of 24 in Security Orchestration, Automation, and Response Software

A cloud SOAR for no-code playbooks, alert triage, investigation cases, and response.

7.8/10Editor score
Devo SOAR7.8 Visit Devo

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Devo SOAR is a cloud-native security orchestration, automation, and response product for security operations teams, particularly those already using Devo SIEM. It brings no-code playbooks, alert triage and enrichment, investigation case management, and incident response workflows into the Devo Security Data Platform. Its visual playbook builder is paired with AI-powered automation and guided creation assistance, positioning it for teams seeking to coordinate repeatable security work without writing playbooks as code.

The product’s breadth centers on moving from alert handling through investigation and response. ThreatLink supports alert correlation and enrichment, while case management gives teams a way to track and collaborate on security investigations. Devo describes continuous measurement and reporting of security outcomes as part of the offering. The vendor says Devo SOAR ships with more than 300 integrations, including Devo Behavior Analytics, Devo Collective Defense, Devo DeepTrace, Slack, and ServiceNow; it also integrates with Devo SIEM capabilities. That ecosystem makes it a natural fit where Devo tools are already in place, while buyers should validate that its external connectors cover their response stack.

Devo SOAR is offered as a SaaS product, with web and API platforms, and the published product information identifies GDPR compliance. According to the vendor’s pricing information, the product is contact-sales rather than a self-serve purchase, and standalone pricing is not published. That makes it harder for teams to compare cost before a sales conversation. Teams evaluating cloud SOAR with case management and Devo SIEM integration should consider it; organizations requiring on-premises deployment or a transparent, published standalone price may prefer to compare alternatives.

Devo SOAR pros and cons

  • Where it wins
    • AI-powered visual, no-code playbooks with guided creation assistance
    • ThreatLink supports alert triage, correlation, and enrichment
    • Case management and automated response workflows in one product
  • Where it doesn't
    • Standalone pricing is not published; purchase requires contacting sales
    • Cloud-only deployment may not fit teams requiring another deployment model
    • Support channels listed are limited to documentation

Devo SOAR fact sheet, pricing and score →

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated · How we research and update