Red Canary Managed Detection and Response
Red CanaryReviews from AWS customer
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
130 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Offers piece of mind and additional details we were missing before
What do you like best about the product?
The threat hunting team does a great job ensuring they are on top of emerging threats in our environment. I appreciate that Red Canary is EDR agnostic using that to all of their customers' advantage by ingesting data from all of the big EDR players. On boarding was super simple - just allowing a few requests into our Azure tenant and we were up and running.
What do you dislike about the product?
We have found a few bugs with the GUI and API integration, but support is quick to get request escalated to development. APIs seem to be an ever changing beast at this point and I am glad Red Canary seems to be able to keep up with all of the changes forced by other vendors.
What problems is the product solving and how is that benefiting you?
Red Canary allows SOC coverage while our staff are not in the office. They offer us 24 x 7 coverage and are essentially an extension of our internal team. The additional context added to alerts and threats allows us to get a quick glimpse into what is happening in the environment and quickly determine severity and course of action.
Red Canary and Patagonia
What do you like best about the product?
Red Canary has provided our team with a quite a few features that has helped our small team focus on larger adminstration activities needing attention. The implementation and easy integration to our existing applications saved tremendous time in getting things up and running without delay helping the team immediately. As a tool we use and reference daily this was critical and any issue we have come across the support of their team has been nothing short of top tier. I cannot recommend Red Canary enough.
What do you dislike about the product?
I dont have much to say in regards to what we dislike about the Red Canary product. If i had to pick something it would be id like to see more integrations available but those are always being added. Any issue we have ever had has been quickly addressed by their team.
What problems is the product solving and how is that benefiting you?
Red Canary is helping us by being an extension of our security team in handling alerts as they come in. Essentially opening up our team to allow us to be more proactive in our work.
New customer onboarded
What do you like best about the product?
I like the automated responses, the ingestion of Micrososft Defender data and that they also consume Azure and firewall data. Their onboarding was fast and efficient, a well defined process.
What do you dislike about the product?
You have so synthesize all of the alerts and determine how to address them. It just takes time.
What problems is the product solving and how is that benefiting you?
24X& eyes on our environment. It takes pressure off our internal team and gives us a greater level of security over our environment.
Red Canary MDR
What do you like best about the product?
Red Canary is a great additional layer to EDR telemetry since the agent by itself cannot catch everything. The blogs, intel insights, and other write ups are also really useful resources that help shed light not only on the world of cyber but also Red Canary's coverage and visibility.
The threat hunting/intel teams are super useful resources whenever there's security questions be it at a high-level or performing deep-dives specific to the organization.
The threat hunting/intel teams are super useful resources whenever there's security questions be it at a high-level or performing deep-dives specific to the organization.
What do you dislike about the product?
Transparency in how alert triage occurs is an area of improvement. If triaged alerts always had comments of why an analyst chose to mark something a threat/not a threat, that would improve trust in the internal processes and provide clarify of where internal teams should focus investigations.
What problems is the product solving and how is that benefiting you?
Alert fatigue and reducing noise
Overall good.
What do you like best about the product?
The Threat Hunting Team is excellent. Of the times I've reached out to them, they responded quickly and they provided good information and insight. I appreciate their recommendations and look for opportunities to reach out to them when we need assistance. The Technical Support Team is also excellent. They know their stuff and go the extra mile to provide essential information. I work with a lot of support teams and I am thankful for how well the RC team functions. That is rare in my experience. I never regret opening tickets for assistance.
What do you dislike about the product?
There have been several instances where we expected RC to identify an issue and no alert was surfaced. Because of this, senior leadership feels, at times, that RC isn't the right partner for us. I think this is due to differences in methodology. RC has a set process, however in certain environments we have activity that for us would be considered unusual and requires follow up, but for RC it's not something that the team will alert on. I also think, that at times we looking for evidence that detections are functioning as described but this can be difficult to come by. Also, I think on the account rep side, there is a lack of training, such that when asked for clarification from our rep, those requests are either insufficiently responded to or outright ignored. It's my job as manager to ask questions and provide explanations to our leadership when there is an issue, I feel unsupported from the RC team in this fashion. I think the RC portal could be more useful. I know it's being improved but 2 years in, I still struggle to get useful information when I need it.
What problems is the product solving and how is that benefiting you?
Obviously, we are using RC to monitor our environment.
Good and responsive produc
What do you like best about the product?
SMS and Email alerts for all the Team members
What do you dislike about the product?
Licensing for non persistent Virtual machines can be improved
What problems is the product solving and how is that benefiting you?
Alerting and quicker analyses of the problem/alert
great service and flexible services
What do you like best about the product?
the integrations with hardware and the automation of threat response
What do you dislike about the product?
you need your own sensor so that we don't have to contract with another vendor
What problems is the product solving and how is that benefiting you?
consuming the huge amount of alerts that we would get from our EDR and filtering out what is really a threat verses just noise
Fantastic!
What do you like best about the product?
After the inital setup of playbooks for our environment, it's pretty much set it and forget it. Love the monthly updates and newletters as well.
What do you dislike about the product?
I really don't have any dislikes with Red Canary.
What problems is the product solving and how is that benefiting you?
The ever changing world of cyber security.
Security Advancement & Hardening
What do you like best about the product?
A deep of security analytic and ingest into every endpoint activity for best hunt and investigation.
What do you dislike about the product?
Currently experience intermittent alert or notification issue working with Red Canary support due to global sms/governance regulations issue. It's great if there is multiplatform especially on the alert notification which is very critical and important as to acknowledge for a high severity threat to be exploit.
What problems is the product solving and how is that benefiting you?
Security measurement especially threat on pre-breaking stages to be "determine" and prevention.
Effective Threat Detection and Response with Red Canary
What do you like best about the product?
What I really like about Red Canary is how easy it makes threat detection and response. It integrates smoothly with our existing tools and provides clear, actionable alerts that cut through the noise. Instead of drowning in false positives, we get meaningful insights backed by their team of experts. The dashboard is intuitive, and the reports are practical, which helps us stay on top of our security game without wasting time.
What do you dislike about the product?
Higher end of the cost scale, lack of hard SLA's on response times.
What problems is the product solving and how is that benefiting you?
Red Canary is helping us sort through the noise of alerts from our tools, identify actual incidents that need our attention, and assisting in responding ot those. This helps our staff focus on more high value projects that help move the business forward.
showing 101 - 110