Red Canary provides a robust expertise to help monitor and protect your organization from cyber threats. They are very personable and quick to help act as part of your team rather than a separate entity. Review collected by and hosted on G2.com.

The only downside about Red Canary, is they are a separate organization and sometimes don't have all of the tribal or internal knowledge of your organization that can be helpful with context during incident investigations. Review collected by and hosted on G2.com.

Working with Red Canary as your partner will greatly enhance your response and detection capabilities across your enterprise. The response time and automation is hands down the best that I have seen at any vendor. Teams are very engaging and have rescued our internal teams from banning legitimate process which would have crippled our environment. Their service pays for itself every single year and then some! Review collected by and hosted on G2.com.

They don't do my laundry. I can't honestly provide much critical feedback on dislikes. They are not perfect, but they are transparent and knowledgeable in their field. Their organization faces the same challenges that you see everywhere. Account reps will be shuffled or will move on to other opportunities. It’s not as frequent but it does happen. Review collected by and hosted on G2.com.

Incorporating Red Canary into our environment has been great. As a Linux admin, when a company says their product "works on Linux" I usually take it with a grain of salt. That is not the case with Red Canary. Red Canary was easy to implement including adding automations. Now that it's installed in our environment it just does its thing which frees us up to focus on supporting our clients. With previous solutions we'd spend hours investigating findings just to find out that most were false positives. Getting that time back has made our team much more efficient. Review collected by and hosted on G2.com.

So far we have not had any issues using Red Canary. The only thing that could be considered an issue is that one of our admins runs Red Canary on his laptop. Since his laptop is regularly offline it constantly shows up in the daily status email. Being able to mark a system as not a server and not include it in the uncommunicative servers list would be nice. Review collected by and hosted on G2.com.

The threat hunting team does a great job ensuring they are on top of emerging threats in our environment. I appreciate that Red Canary is EDR agnostic using that to all of their customers' advantage by ingesting data from all of the big EDR players. On boarding was super simple - just allowing a few requests into our Azure tenant and we were up and running. Review collected by and hosted on G2.com.

We have found a few bugs with the GUI and API integration, but support is quick to get request escalated to development. APIs seem to be an ever changing beast at this point and I am glad Red Canary seems to be able to keep up with all of the changes forced by other vendors. Review collected by and hosted on G2.com.

The Threat Hunting Team is excellent. Of the times I've reached out to them, they responded quickly and they provided good information and insight. I appreciate their recommendations and look for opportunities to reach out to them when we need assistance. The Technical Support Team is also excellent. They know their stuff and go the extra mile to provide essential information. I work with a lot of support teams and I am thankful for how well the RC team functions. That is rare in my experience. I never regret opening tickets for assistance. Review collected by and hosted on G2.com.

There have been several instances where we expected RC to identify an issue and no alert was surfaced. Because of this, senior leadership feels, at times, that RC isn't the right partner for us. I think this is due to differences in methodology. RC has a set process, however in certain environments we have activity that for us would be considered unusual and requires follow up, but for RC it's not something that the team will alert on. I also think, that at times we looking for evidence that detections are functioning as described but this can be difficult to come by. Also, I think on the account rep side, there is a lack of training, such that when asked for clarification from our rep, those requests are either insufficiently responded to or outright ignored. It's my job as manager to ask questions and provide explanations to our leadership when there is an issue, I feel unsupported from the RC team in this fashion. I think the RC portal could be more useful. I know it's being improved but 2 years in, I still struggle to get useful information when I need it. Review collected by and hosted on G2.com.

As a Red Canary customer for five years now, I've consistently been impressed by the service and level of support. We're fortunate to rarely receive alerts (which is a testament to accurate threat identification); however, when we do, our trust in Red Canary's analysis drives my team to act quickly to review and resolve. I appreciate the company being customer-focused which is demonstrated through regular engagement and their continous innovation to stay competitive. Review collected by and hosted on G2.com.

I've found Red Canary's support to be extremely proactive (e.g. alerting when an integration fails), responsive (e.g. promptly responding to cases), and dedicated (e.g. working to find additional information); however, it's occasionally difficult having the right SMEs available to answer technical questions. This was mostly an issue with complexities surrounding our Azure integration. Review collected by and hosted on G2.com.

Having a team of qualified security professionals watching your systems 24x7 is a great assurance. Review collected by and hosted on G2.com.

It took some asking, but seems the SLA is two hours for evaluating an event that may be an incident. In practice, we have done much better, with some responses in under 3 minutes. Review collected by and hosted on G2.com.

Red Canary is a breeze to set up! With help from the onboarding team, my team was able to configure our environment within a day. Immediately after setup, we could start monitoring through the pre-built integrations with most of our cybersecurity pain points. Review collected by and hosted on G2.com.

We have not yet found anything negative to report. Review collected by and hosted on G2.com.

Being able to sleep at night or go on vacation knowing someone or something is always watching. Review collected by and hosted on G2.com.

Some of the Cortex XSIAM integration still needs to be fleshed out. Review collected by and hosted on G2.com.

Integrated easily with all of the products we use. Has saved some time for our security team to work on other projects Review collected by and hosted on G2.com.

We were not easily able to integrate AWS but we will get there. Review collected by and hosted on G2.com.