Red Canary MDR

What Red Canary MDR is

Red Canary MDR is a managed detection and response service that brings together security signals from endpoints, identities, cloud, and other connected sources. Its experts monitor, investigate, and help respond to threats around the clock, using behavior-based detections, threat intelligence, and threat hunts to surface suspicious activity. Customers can follow investigations in a unified timeline that explains a threat’s likely root cause, scope, and impact. Response combines automated capabilities with human-led action, including remediation by Red Canary experts. Integrations cover endpoint, network, cloud, identity, SaaS, and other security data, with examples including AWS, Microsoft, CrowdStrike, and Palo Alto Networks. Alerts can flow to SIEM, SOAR, or ITSM systems, and its Security Data Lake can retain MDR or other raw data for a period selected by the customer. Red Canary positions the service as support for an existing SOC. Its current product documentation identifies the service as Zscaler MDR. Pricing is available on request.