Red Canary is a helpful solution that offers brilliant threat detection and this makes it easy to identify security challenges

The software handles and manages SOC processes, and this includes active monitoring and proper security alerts

Red Canary reduces chances for false positives and this makes the entire security process successful

The app provides robust remediation procedures and guidance, which makes the users more solid and efficient

The app connects with Microsoft Defender and this helps in improving security visibility

Red Canary has remarkable threat intelligence capabilities and this helps in identifying and learning threat patterns Review collected by and hosted on G2.com.

Red Canary has premium pricing, something that makes small businesses ignore it and prefer to others

The customization of a dashboard is inflexible and this affects companies performance Review collected by and hosted on G2.com.

Red Canary is a robust managed detection and response approach that facilitates the security team to identify threats faster

Red Canary has robust reputation on sharing actionable alerts and there is no false positives, hence, the alerts shared are accurate

The program issues a detailed investigation information or report, and the appropriate remediation guide

The integration of Red Canary with items such as CrowdStrike, Microsoft Defender, among others is a versatile thing from the app

The app provides reliable customer service or feedback and it conducts knowledgeable analysis Review collected by and hosted on G2.com.

Red Canary has an expensive pricing, no small packages for small companies

Occasionally, Red Canary experiences some delays, and this gaps affects the continuity of the company Review collected by and hosted on G2.com.

They are still there to help you when you have a cybersecurity need. Review collected by and hosted on G2.com.

Ever since they were bought by ZScaler it appears that there was a lot of turn over and a lot of our account managers that we had either got laid off or quit which created this roulette wheel of account managers to deal with. Review collected by and hosted on G2.com.

What I like most about Red Canary is its accuracy in threat detection and its exceptional speed in protecting systems with high efficiency. The performance combines speed and efficiency simultaneously. Also, I like the ease of reading and preparing reports that help us understand threats quickly, which reduces wasted time on reviewing false alarms and focuses our efforts only on real threats. Review collected by and hosted on G2.com.

Some see the price as slightly high, and it needs to integrate with many other systems. Review collected by and hosted on G2.com.

It reduces the burden on internal security teams by handling alert monitoring, investigation, and validation, while providing clear and actionable findings instead of noise. This helps improve response speed and overall security confidence. Review collected by and hosted on G2.com.

One downside of Red Canary is that it can feel less flexible for advanced customization compared to building an in-house SOC. Some users may also find it limited in deep visibility or control over certain investigations since it’s a managed service. Review collected by and hosted on G2.com.

Getting started with Red Canary was relatively simple and straightforward. Working with the Red Canary team has been an overall positive experience and the customer service has been outstanding. Though we are still learning product, and refining our internal response processes, we are still gaining valuable insight on the alerts that are published. The information is compiled from the alerting sources is easy to access and helps us from having to traverse multiple consoles and dashboards. The new 'investigations' link, provided in the Threat portal takes us directly to the 'inner workings' of the Red Canary 'magic'. So far, we are pleased with the Red Canary team and their product. It's an improvement from the solution from which we migrated. Review collected by and hosted on G2.com.

Navigation does take some getting used to. We would like to see FreshDesk support, in the future. Review collected by and hosted on G2.com.

I sleep better at night knowing the Red Canary team has our back. Before Red Canary, I would need to interrupt my day to perform investigations on alerts that came into my mailbox, that included after hours alerts that would take me away from my family and friends for hours at a time. With Red Canary, they now take that off my plate and I trust fully in their investigations, analytics, and alert categorization. The configuration of playbooks and integrations into our platforms, allows automation of activity that I would have had to do manually through several different platforms and innumerous clicks. Red Canary has simplified and made more efficient response times in addressing incidents, even in some cases, retroactively analyzing telemetry that was initially not viewed as a threat, but found later to be something to worry about. The platform is easy to navigate, the implementation team was knowledgeable, I'm in the dashboard every day to see what's new on their feed and to see how they've protected our environment. On the rare occasion I need to reach out to support, they are responsive, professional, and knowledgeable to find me a solution. I am whole heartedly thankful that we invested in Red Canary! Review collected by and hosted on G2.com.

It's hard for me to find a dislike about Red Canary, I've used the service for about 12 months and any negatives I've encountered in their service is addressed by my account team or customer support. Review collected by and hosted on G2.com.

Overall, this is a very good MDR solution. Communication about their roadmap, internal processes, and threat intelligence is clear and informative. Their blog is also excellent, providing valuable information. A few points stand out to me: The initial sales and POC process was handled very professionally, they were transparent about any issues or unknowns and never tried to hide anything. The setup and rollout were seamless and straightforward. Integrations are simple to manage. I appreciate being able to view some of the detection logic, which is extremely helpful when troubleshooting or checking if a specific detection exists. Automation is both easy to configure and highly customizable. Although we no longer use it, the Red Canary Linux agent performed very well, with minimal overhead and solid telemetry, though I do wish there had been more visibility into that telemetry. Review collected by and hosted on G2.com.

1. Sometimes the level 1 support has been underwhelming, but it has been rare.

2. Sometimes the time to raise an alert takes longer than expected. Not common, but has occurred more than once.

3. Not able to create custom detections (at least I am not aware of that functionality). Review collected by and hosted on G2.com.

The ease of mind I get from knowing an expert will be available 24/7 to respond to critical alerts, and provide low-level expertise during an incident. Review collected by and hosted on G2.com.

Unable to fully integrate with our suite of tools in CrowdStrike, particularly the CrowdStrike Identity Protection. Review collected by and hosted on G2.com.

The IR team and detection engineers here are truly outstanding, and it's always a pleasure to collaborate with them. The implementation of Red Canary was very easy and their onboarding team was great to work with. Review collected by and hosted on G2.com.

Over the past few years, we've undergone several external penetration tests, and during these assessments, Red Canary was not able to identify the malicious activity while the tests were ongoing.

Also, they do not have any sort of alert ingestion integrations with Splunk or other SIEM platforms, and we needed to rely on custom API scripts to ingest alerts into our SIEM. Review collected by and hosted on G2.com.