Red Canary Managed Detection and Response
Red CanaryReviews from AWS customer
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
128 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Good solution to get you started on Managed Detection and Response
What do you like best about the product?
The Active Remediation add on is extremely useful
What do you dislike about the product?
Lack of account maintenance follow up after the intial setup
What problems is the product solving and how is that benefiting you?
24/7/365 coverage in place of a three person SOC
Great Partner!
What do you like best about the product?
The support from our account team has been top notch and the product has really helped the security of our company. Implementation was real easy.
What do you dislike about the product?
No negatives to report. We have been very happy
What problems is the product solving and how is that benefiting you?
We are not large enough to keep a full time security person so this fills our need.
Feedback on Red Canary
What do you like best about the product?
Good customer service, easy to use, decent threat intelligence and threat detection capability. Playbook automation helps with timely response to threats. The 24*7 service is a great addition to the in house SOC team.
What do you dislike about the product?
We cannot solely rely on RC as it primarily focuses on EDR and identity security log monitoring. It does not allow custom detect engineering either.
What problems is the product solving and how is that benefiting you?
24*7 security monitoring
Red Canary Doesn't Disappoint
What do you like best about the product?
I appreciate the service that we receive from Red Canary. Red Canary is quick to respond and I like that we have a dedicated team for support. It's also very easy to use and allows us to track the alerts we recieve.
What do you dislike about the product?
There are a few features that I wish Red Canary had including the ability to see logins from the screen to eliminate the need to toggle back and forth between tools.
What problems is the product solving and how is that benefiting you?
Red Canary is solving the problem of "alert fatigue". We are no longer investigating every alert that comes through. We are confident that Red Canary is going to reach out to us if we need to take action.
Red Canary Provide a Great Service
What do you like best about the product?
RC will work with you to improve your security posture. Always had a great experience with their support and customer managers.
The analysis of alerts is detailed and cuts down a large amount of benign alerts
The analysis of alerts is detailed and cuts down a large amount of benign alerts
What do you dislike about the product?
RC support work in US timezones, can be tricky to organise a suitable time for meetings.
What problems is the product solving and how is that benefiting you?
Performing detailed analysis on a large volume of events with automated playbooks taking effect in case of malicious activity.
Extension of the team
What do you like best about the product?
They are great extension to the team. Providing around the clock monitoring and enrichment to alerts, they help bring down that mean time to detect threats in the environment. I appreciate their investigation data across the client base to help find threats that the other players down. Being reliant on 3rd party definitions that have to appease a wide scope of clients can be determental to early discovery.
What do you dislike about the product?
Appending security around SaaS applications and limitations on involvment in a real incident response situation are the dislikes of avilable options.
What problems is the product solving and how is that benefiting you?
Discovery and threat enrichment to alerts. Bringing down investigation time on positive alerts to remeidate is the greatest benefit.
Red Canary services for MDR
What do you like best about the product?
Onboarding was very well structured with good clarity on how to setup the tool. Great support and response when contacting the threat hunting team.
What do you dislike about the product?
In order to setup the playbook/servies, internal team has to know to identify the assets as groups and name them accordingly in the tool. This took some time for the team to understand.
What problems is the product solving and how is that benefiting you?
Identify and address threats 24/7 for situations with known play book. Getting guidance to responses.
Still need additional coverage for identity and cloud security.
What do you like best about the product?
Unlike many traditional MDR providers that rely on automated alerts, Red Canary’s human-driven analysis significantly reduces false positives and provides actionable intelligence.
What do you dislike about the product?
Red Canary is excellent in endpoint-focused detection, its coverage outside of EDR such as network, identity, and cloud security is somewhat limited compared to full-spectrum XDR solutions.
What problems is the product solving and how is that benefiting you?
Security monitoring
Very Happy
What do you like best about the product?
What I like best about Red Canary is the high-touch communication, whether it's routine updates, monthly reviews, or assistence with investigations -- the communication has always been above & beyond.
What do you dislike about the product?
There are no particular downsides or things I dislike about Red Canary.
What problems is the product solving and how is that benefiting you?
As an organization with a very small head-count for security operations, Red Canary perfectly supplements our monitoring and response for security incidents.
Red Canary lets me sleep at night
What do you like best about the product?
The support team is fast, extensive, and knowledgable. They are fullkky invested and complete in every investigation that they work on plus have monthly check-ins to make sure they are working as we need.
What do you dislike about the product?
Nothing. I can't say anything bad about them.
What problems is the product solving and how is that benefiting you?
We are being monitored for threats and getting help resolving them.
showing 31 - 40