Red Canary Managed Detection and Response
Red CanaryReviews from AWS customer
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
128 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Quick, Easy, and Supported by an Excellent Team
What do you like best about the product?
Red Canary is quick and easy to work with. They have excellent people working for them that greatly assist with triage of alerts.
What do you dislike about the product?
Identity threats can throw a lot of alerts that Red Canary folks can't act on.
What problems is the product solving and how is that benefiting you?
Red Canary is helping to scrub through all of our alerts to help identify security threats.
Innovative Platform with a Fantastic Team
What do you like best about the product?
Great team, platform, and innovations; I love how they are developing new features, integrations, and listen to client feedback.
What do you dislike about the product?
Nothing comes to mind; entirely possible that the few tiny things that would help me with yearly or quarterly administrative tasks (licensing true-up) are in place and I just need to go look myself.
What problems is the product solving and how is that benefiting you?
Very nearly a desired single pane of glass for our security stack, which is hugely beneficial to a small and elastic security team.
Excellent Documentation and Support, but Needs Better Automation for Re-activating Devices
What do you like best about the product?
The documentation for this tool is excellent. Whenever I have a question, I can almost always find the answer there. On the rare occasions when the documentation doesn't cover my issue, the support team is fantastic. They respond quickly and are always very helpful.
What do you dislike about the product?
I wish Red Canary would allow customers to create a playbook for automating the re-activation of decommissioned computers that reappear on the network, rather than having to handle each one individually. The current process is very time-consuming.
What problems is the product solving and how is that benefiting you?
Red Canary responds rapidly to potential issues, promptly notifying us whenever there is a concern with an account, system, or a user's login location. This helps ensure that we do not overlook anything important, even when we are monitoring things on our own.
Excellent MDR, Transparent Sales Process, Minor Support and Alert Delays
What do you like best about the product?
Overall, this is a very good MDR solution. Communication about their roadmap, internal processes, and threat intelligence is clear and informative. Their blog is also excellent, providing valuable information. A few points stand out to me: The initial sales and POC process was handled very professionally, they were transparent about any issues or unknowns and never tried to hide anything. The setup and rollout were seamless and straightforward. Integrations are simple to manage. I appreciate being able to view some of the detection logic, which is extremely helpful when troubleshooting or checking if a specific detection exists. Automation is both easy to configure and highly customizable. Although we no longer use it, the Red Canary Linux agent performed very well, with minimal overhead and solid telemetry, though I do wish there had been more visibility into that telemetry.
What do you dislike about the product?
1. Sometimes the level 1 support has been underwhelming, but it has been rare.
2. Sometimes the time to raise an alert takes longer than expected. Not common, but has occurred more than once.
3. Not able to create custom detections (at least I am not aware of that functionality).
2. Sometimes the time to raise an alert takes longer than expected. Not common, but has occurred more than once.
3. Not able to create custom detections (at least I am not aware of that functionality).
What problems is the product solving and how is that benefiting you?
An excellent MDR augmenting our SOC at all levels, as well as providing their own detections and threat intelligence.
Great Overall, But Monthly Check-Ins Are Too Frequent
What do you like best about the product?
Playbooks to notify or act upon certain conditions.
What do you dislike about the product?
Monthly touching base. Every other month would be better.
What problems is the product solving and how is that benefiting you?
Providing 24/7 monitoring of our EDR environment.
Easy Onboarding and Excellent Support with Red Canary
What do you like best about the product?
Getting started with Red Canary was relatively simple and straightforward. Working with the Red Canary team has been an overall positive experience and the customer service has been outstanding. Though we are still learning product, and refining our internal response processes, we are still gaining valuable insight on the alerts that are published. The information is compiled from the alerting sources is easy to access and helps us from having to traverse multiple consoles and dashboards. The new 'investigations' link, provided in the Threat portal takes us directly to the 'inner workings' of the Red Canary 'magic'. So far, we are pleased with the Red Canary team and their product. It's an improvement from the solution from which we migrated.
What do you dislike about the product?
Navigation does take some getting used to. We would like to see FreshDesk support, in the future.
What problems is the product solving and how is that benefiting you?
No ongoing issues at the moment.
Red Canary has every one of your sides
What do you like best about the product?
Red Canary's support and threat experts are true experts in their field. They work hard and provide a deep technical analysis related to any finding and will even provide input for a non-finding if you ask. Ifs like the team really loves to chat with their customers so they can talk security shop and provide any actionable intel.
The best thing is that they will go outside of their lane and provide guidance if you have security questions related to best practices or technical points on how to work through an event. They will also let you know if they are not able to provide clean guidance but can still provide a direction to help you.
The best thing is that they will go outside of their lane and provide guidance if you have security questions related to best practices or technical points on how to work through an event. They will also let you know if they are not able to provide clean guidance but can still provide a direction to help you.
What do you dislike about the product?
You may get a specific recommendation that you may not be able to perform, or their feedback is they are not able to assist because you are not subscribed to a specific service.
What problems is the product solving and how is that benefiting you?
Their security team is an extension of our SOC. We have a group of experts that we know we can lean into to ask anything related to the even or asking regards to other security questions. This allows our lean team to move on to other more pressing matter and projects,
Great system and customer service.
What do you like best about the product?
The customer service and product are great.
What do you dislike about the product?
I do not have anything that I dislike about Red Canary.
What problems is the product solving and how is that benefiting you?
Red Canary is helping us stop potential threats and attackers in real time without the need for immediate review from our team, ultimately saving us time and energy.
Great Experience Overall
What do you like best about the product?
Red Canary provides timely alerts with rich contextual information, which significantly accelerates my ability to triage and respond to security incidents. The quality of the alerting is excellent, with very low false positive escalation rates, saving me valuable time and reducing alert fatigue. I also appreciate the platform’s automation capabilities, which allow for streamlined and automated incident response workflows, making it easier to contain and remediate threats efficiently.
What do you dislike about the product?
I have not encountered any major downsides so far.
What problems is the product solving and how is that benefiting you?
Red Canary is solving the challenge of providing comprehensive, around-the-clock security monitoring and threat detection without requiring a large internal SOC team. With Red Canary’s managed detection and response, we’re able to maintain 24/7 coverage and quickly identify important security events, even with a small team. This allows us to confidently focus on other operational priorities, knowing that critical threats will be surfaced promptly and with actionable context. As a result, we can shift our attention back to security response only when it truly matters, improving both our efficiency and our security posture.
Red Canary’s team continuously monitors your environment
What do you like best about the product?
Threat Intelligence & Behavioral Analytics
Powered by thousands of analytics and deep threat research (mapping to MITRE ATT&CK), Red Canary delivers data-driven, intelligence-led operations
Powered by thousands of analytics and deep threat research (mapping to MITRE ATT&CK), Red Canary delivers data-driven, intelligence-led operations
What do you dislike about the product?
Would you like to dive deeper into any component—such as their threat intelligence engine, MDR SOC workflows, or integration specifics?
What problems is the product solving and how is that benefiting you?
Readiness Exercises & Training
On-demand and facilitated tabletop exercises using real-world TTPs (e.g., from Scattered Spider), atomic tests, and attack simulations improve incident-response readiness continuously
sales.superagi.com
+4
redcanary.com
+4
redcanary.com
+4
.
Automation & SOAR Capabilities
Red Canary offers automated, customizable playbooks that accelerate response time and reduce operator workload
On-demand and facilitated tabletop exercises using real-world TTPs (e.g., from Scattered Spider), atomic tests, and attack simulations improve incident-response readiness continuously
sales.superagi.com
+4
redcanary.com
+4
redcanary.com
+4
.
Automation & SOAR Capabilities
Red Canary offers automated, customizable playbooks that accelerate response time and reduce operator workload
showing 1 - 10