Red Canary Managed Detection and Response
Red CanaryReviews from AWS customer
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
130 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Exceptional Partner, But Detection Gaps During Pen Tests
What do you like best about the product?
The IR team and detection engineers here are truly outstanding, and it's always a pleasure to collaborate with them. The implementation of Red Canary was very easy and their onboarding team was great to work with.
What do you dislike about the product?
Over the past few years, we've undergone several external penetration tests, and during these assessments, Red Canary was not able to identify the malicious activity while the tests were ongoing.
Also, they do not have any sort of alert ingestion integrations with Splunk or other SIEM platforms, and we needed to rely on custom API scripts to ingest alerts into our SIEM.
Also, they do not have any sort of alert ingestion integrations with Splunk or other SIEM platforms, and we needed to rely on custom API scripts to ingest alerts into our SIEM.
What problems is the product solving and how is that benefiting you?
Red Canary serves as our 24/7 SOC analyst, monitoring our systems during off hours. In addition, Red Canary acts as an extra layer of oversight, working alongside our internal SOC team to enhance our security monitoring.
Red Canary Gives Peace of Mind and Streamlines Incident Response
What do you like best about the product?
I sleep better at night knowing the Red Canary team has our back. Before Red Canary, I would need to interrupt my day to perform investigations on alerts that came into my mailbox, that included after hours alerts that would take me away from my family and friends for hours at a time. With Red Canary, they now take that off my plate and I trust fully in their investigations, analytics, and alert categorization. The configuration of playbooks and integrations into our platforms, allows automation of activity that I would have had to do manually through several different platforms and innumerous clicks. Red Canary has simplified and made more efficient response times in addressing incidents, even in some cases, retroactively analyzing telemetry that was initially not viewed as a threat, but found later to be something to worry about. The platform is easy to navigate, the implementation team was knowledgeable, I'm in the dashboard every day to see what's new on their feed and to see how they've protected our environment. On the rare occasion I need to reach out to support, they are responsive, professional, and knowledgeable to find me a solution. I am whole heartedly thankful that we invested in Red Canary!
What do you dislike about the product?
It's hard for me to find a dislike about Red Canary, I've used the service for about 12 months and any negatives I've encountered in their service is addressed by my account team or customer support.
What problems is the product solving and how is that benefiting you?
We are required to have 24/7 monitoring, which is difficult for a small staff that likes to sleep at night and spend time with their family after hours. Red Canary has helped us address threats after hours, have alerted us on potential threats that we should be concerned about, and keeps us up to date on the latest threats that could impact our environment.
Quick, Easy, and Supported by an Excellent Team
What do you like best about the product?
Red Canary is quick and easy to work with. They have excellent people working for them that greatly assist with triage of alerts.
What do you dislike about the product?
Identity threats can throw a lot of alerts that Red Canary folks can't act on.
What problems is the product solving and how is that benefiting you?
Red Canary is helping to scrub through all of our alerts to help identify security threats.
Innovative Platform with a Fantastic Team
What do you like best about the product?
Great team, platform, and innovations; I love how they are developing new features, integrations, and listen to client feedback.
What do you dislike about the product?
Nothing comes to mind; entirely possible that the few tiny things that would help me with yearly or quarterly administrative tasks (licensing true-up) are in place and I just need to go look myself.
What problems is the product solving and how is that benefiting you?
Very nearly a desired single pane of glass for our security stack, which is hugely beneficial to a small and elastic security team.
Excellent Documentation and Support, but Needs Better Automation for Re-activating Devices
What do you like best about the product?
The documentation for this tool is excellent. Whenever I have a question, I can almost always find the answer there. On the rare occasions when the documentation doesn't cover my issue, the support team is fantastic. They respond quickly and are always very helpful.
What do you dislike about the product?
I wish Red Canary would allow customers to create a playbook for automating the re-activation of decommissioned computers that reappear on the network, rather than having to handle each one individually. The current process is very time-consuming.
What problems is the product solving and how is that benefiting you?
Red Canary responds rapidly to potential issues, promptly notifying us whenever there is a concern with an account, system, or a user's login location. This helps ensure that we do not overlook anything important, even when we are monitoring things on our own.
Excellent MDR, Transparent Sales Process, Minor Support and Alert Delays
What do you like best about the product?
Overall, this is a very good MDR solution. Communication about their roadmap, internal processes, and threat intelligence is clear and informative. Their blog is also excellent, providing valuable information. A few points stand out to me: The initial sales and POC process was handled very professionally, they were transparent about any issues or unknowns and never tried to hide anything. The setup and rollout were seamless and straightforward. Integrations are simple to manage. I appreciate being able to view some of the detection logic, which is extremely helpful when troubleshooting or checking if a specific detection exists. Automation is both easy to configure and highly customizable. Although we no longer use it, the Red Canary Linux agent performed very well, with minimal overhead and solid telemetry, though I do wish there had been more visibility into that telemetry.
What do you dislike about the product?
1. Sometimes the level 1 support has been underwhelming, but it has been rare.
2. Sometimes the time to raise an alert takes longer than expected. Not common, but has occurred more than once.
3. Not able to create custom detections (at least I am not aware of that functionality).
2. Sometimes the time to raise an alert takes longer than expected. Not common, but has occurred more than once.
3. Not able to create custom detections (at least I am not aware of that functionality).
What problems is the product solving and how is that benefiting you?
An excellent MDR augmenting our SOC at all levels, as well as providing their own detections and threat intelligence.
Great Overall, But Monthly Check-Ins Are Too Frequent
What do you like best about the product?
Playbooks to notify or act upon certain conditions.
What do you dislike about the product?
Monthly touching base. Every other month would be better.
What problems is the product solving and how is that benefiting you?
Providing 24/7 monitoring of our EDR environment.
Easy Onboarding and Excellent Support with Red Canary
What do you like best about the product?
Getting started with Red Canary was relatively simple and straightforward. Working with the Red Canary team has been an overall positive experience and the customer service has been outstanding. Though we are still learning product, and refining our internal response processes, we are still gaining valuable insight on the alerts that are published. The information is compiled from the alerting sources is easy to access and helps us from having to traverse multiple consoles and dashboards. The new 'investigations' link, provided in the Threat portal takes us directly to the 'inner workings' of the Red Canary 'magic'. So far, we are pleased with the Red Canary team and their product. It's an improvement from the solution from which we migrated.
What do you dislike about the product?
Navigation does take some getting used to. We would like to see FreshDesk support, in the future.
What problems is the product solving and how is that benefiting you?
No ongoing issues at the moment.
Red Canary has every one of your sides
What do you like best about the product?
Red Canary's support and threat experts are true experts in their field. They work hard and provide a deep technical analysis related to any finding and will even provide input for a non-finding if you ask. Ifs like the team really loves to chat with their customers so they can talk security shop and provide any actionable intel.
The best thing is that they will go outside of their lane and provide guidance if you have security questions related to best practices or technical points on how to work through an event. They will also let you know if they are not able to provide clean guidance but can still provide a direction to help you.
The best thing is that they will go outside of their lane and provide guidance if you have security questions related to best practices or technical points on how to work through an event. They will also let you know if they are not able to provide clean guidance but can still provide a direction to help you.
What do you dislike about the product?
You may get a specific recommendation that you may not be able to perform, or their feedback is they are not able to assist because you are not subscribed to a specific service.
What problems is the product solving and how is that benefiting you?
Their security team is an extension of our SOC. We have a group of experts that we know we can lean into to ask anything related to the even or asking regards to other security questions. This allows our lean team to move on to other more pressing matter and projects,
Great system and customer service.
What do you like best about the product?
The customer service and product are great.
What do you dislike about the product?
I do not have anything that I dislike about Red Canary.
What problems is the product solving and how is that benefiting you?
Red Canary is helping us stop potential threats and attackers in real time without the need for immediate review from our team, ultimately saving us time and energy.
showing 1 - 10