Red Canary Managed Detection and Response
Red CanaryReviews from AWS customer
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
130 reviews
from
and
External reviews are not included in the AWS star rating for the product.
The best MDR
What do you like best about the product?
The Customer satisifaction team, specifically Michael Wroe, has been a fantastic asset.
What do you dislike about the product?
Red Canary can become quite pricey with their new ala carte model
What problems is the product solving and how is that benefiting you?
RC helps us manage 24/7 detection and response efforts
Very Positive Expereince
What do you like best about the product?
Fast and Accurate, relevent alerts for our team
What do you dislike about the product?
There is nothing that I dislike about Red Canary
What problems is the product solving and how is that benefiting you?
Red Canary filters and agregates alerts from multiple sources to provide consise and relevent alerts to our security team.
On My Experience with Red Canary
What do you like best about the product?
I like how quickly we were able to stand the platform up, funnel our data in, and implement some basic playbooks. For our organization, it took about 72 hours while we were in the middle of a very serious security event. In the 4 or 5 years our org has been using it, we were able to greatly improve our overall security posture by being able to bubble up the true threats and automating the responses in our environment while ignoring the rest of the noise.
This is in large part due to the work that Red Canary does in the background before my team or my MSSP even sees it. As an example, in my environment for the past 30 days, we have taken in 14 billion telemetry records, Red Canary detected roughly 40, 000 analytic matches, from those analytics about 200 events were found to be potentially threatening, from there Red Canary's CIRT analyzed those events and from those 200 were able to find 2 true threats.
Additionally, the file telemetry we funnel in from our endpoints allows us to track file integrity through our Red Canary portal which allowed us to terminate our legacy FIM solution which was fairly convoluted and didn't allow for very granular filtering.
One other mention before this turns into a novel. In the few times I've needed to engage customer support, I have had prompt and helpful support to resolve my few issues(usually caused by me).
This is in large part due to the work that Red Canary does in the background before my team or my MSSP even sees it. As an example, in my environment for the past 30 days, we have taken in 14 billion telemetry records, Red Canary detected roughly 40, 000 analytic matches, from those analytics about 200 events were found to be potentially threatening, from there Red Canary's CIRT analyzed those events and from those 200 were able to find 2 true threats.
Additionally, the file telemetry we funnel in from our endpoints allows us to track file integrity through our Red Canary portal which allowed us to terminate our legacy FIM solution which was fairly convoluted and didn't allow for very granular filtering.
One other mention before this turns into a novel. In the few times I've needed to engage customer support, I have had prompt and helpful support to resolve my few issues(usually caused by me).
What do you dislike about the product?
I don't really have any dislikes of the plaftform in the time I have been using it.
What problems is the product solving and how is that benefiting you?
The Red Canary platform really enabled us to find a lot of threats in our environment that we were basically blind to and systematically remediate them through automation playbooks. This really cut down the amount of time a person had to spend doing manual remediation after our previous legacy solutions failed us.
Red Canary does its job which allows me to do mine.
What do you like best about the product?
Incorporating Red Canary into our environment has been great. As a Linux admin, when a company says their product "works on Linux" I usually take it with a grain of salt. That is not the case with Red Canary. Red Canary was easy to implement including adding automations. Now that it's installed in our environment it just does its thing which frees us up to focus on supporting our clients. With previous solutions we'd spend hours investigating findings just to find out that most were false positives. Getting that time back has made our team much more efficient.
What do you dislike about the product?
So far we have not had any issues using Red Canary. The only thing that could be considered an issue is that one of our admins runs Red Canary on his laptop. Since his laptop is regularly offline it constantly shows up in the daily status email. Being able to mark a system as not a server and not include it in the uncommunicative servers list would be nice.
What problems is the product solving and how is that benefiting you?
Red Canary leveraging its expertise to review findings not only saves me time but gives me peace of mind.
Promising first several months using Red Canary
What do you like best about the product?
Red Canary first and foremost has reduced the amount of noise we were getting from our various log sources in our SIEM. Set up relatively seamless. Every staff member at Red Canary we have worked with has been a pleasure to work with and has been transparent. I am in the console every day looking at threats, alert, and other data being collected. Red Canary has fit well within our team workflows.
What do you dislike about the product?
I wish the integrations beyond Crowdstrike were a bit more robust and greater in number. Red Canary is perhaps too reliant on Crowstrike and less on our other sources which are important (Cloud, Identity Email, etc.). We also find that Red Canary detections could be more proactive.
What problems is the product solving and how is that benefiting you?
Red Canary helps us identitfy threats in our environment in an efficient manner, wasting less time on false positive detections than we had in the past. It also does a good job of identifying areas within our environment that need fixing/remediaiton.
Red Canary
What do you like best about the product?
R.C has an excellent way of identifiying endpoint either by host name or other IDs should an incident be recorded. In a mid to large environement this is very handy. R.C is one of my favorite tool in my cybersec stack and adds value on a top tier level.
What do you dislike about the product?
Navigating through the mobile app is a bit difficult. A simliar interface with quick notification and incident details would be much appreciated. Im sure feature updates in the future will resolve this.
What problems is the product solving and how is that benefiting you?
Endpoint detection and threat hunting notifications. Key in monotoring my firm's security posture.
What Red Canary has done for me.
What do you like best about the product?
I have not had an issue that the team couldn't help me complete with the most friendly and engaging attitude. The GUI in intuitive and simple. Implementation was a breeze with their team and I couldn't have asked for a better process. I am in this system daily checking news and gaining oversight into my proccesses. The intergrations have been simple and straight forward. The connections to Azure, O365 and the identity have given me a real peice of mind and the ability to finally get some sleep at night.
What do you dislike about the product?
I can't think of a single negative thing to say about RC.
What problems is the product solving and how is that benefiting you?
Peice of mind and sleep at night is the largest benefit. As we traversed through this massive Microsoft world in 2024 we didn't realize how blind we were until we hired them on.
Red Canary: A Reliable and Responsive MDR Partner
What do you like best about the product?
Red Canary has been a fantastic partner for our managed detection and response (MDR) needs. Their team members are quick to respond, very knowledgeable, and always supportive when it comes to protecting our environment. They make it easy to trust their expertise and rely on their help.
Overall, Red Canary is reliable, responsive, and committed to improving their services. We’re happy to have them as a partner in keeping our organization secure.
Overall, Red Canary is reliable, responsive, and committed to improving their services. We’re happy to have them as a partner in keeping our organization secure.
What do you dislike about the product?
The only challenge we’ve faced is that some of our identity solutions aren’t fully supported yet. That said, we know they’re working on it, as identity threats are becoming a bigger issue for everyone, including us.
What problems is the product solving and how is that benefiting you?
They help us identify threats in our environment and give us steps to respond and fix any issues. Their tools analyze millions of log entries and alerts to provide us with actionable insights while reducing false positives. We have a fairly small team considering the size of our infrastructure and Red Canary helps augment our staff size.
My experience with Red Canary has been excellent
What do you like best about the product?
What I like the best about RC is the protection and monitoring of all endpoints. The account manager is fantasitic and is always letting me know what RC has on the roadmap.
What do you dislike about the product?
I do not see any downsides to Red Canary at this point.
What problems is the product solving and how is that benefiting you?
RC is solving the issue of not having endpoints vulerable to ransomware. This protection helps us not have to have downtime if our network is attacked.
A great example of a non-stop learning MDR
What do you like best about the product?
I like how we have monthly cadence meetings with high quality managers that are interested in our security and success.
What do you dislike about the product?
It would be nice to access threats, playbooks and other features in an app.
What problems is the product solving and how is that benefiting you?
They are finding threat patterns by examining very large amounts of log data from our various security systems and allowing automated capabilities to respond to them.
showing 81 - 90