Red Canary Managed Detection and Response

Positive

My company uses Red Canary MDR to simulate MITRE ATT&CK, like spearphishing and updating domain names.

The most valuable feature of the solution is its automation part. If we have to perform MITRE ATT&CK, we have to do it step by step, wherein we have to run all the commands, while Red Canary MDR automates everything. We must run a single command, and Red Canary MDR will do everything on our behalf.

Red Canary MDR generates a lot of output, so it would be good if, in the end, it generates a summary of all the previous attacks and what was the outcome of a single attack, especially so that it becomes easy for the user to see the summary and analyze the whole thing. In general, the solution currently fails to provide a summary to its users.

I have experience with Red Canary MDR for one of my projects for around two months. I am a user of the solution.

It is a stable solution.

Scalability-wise, it's actually a good product.

In my company, a group of four people uses the solution.

The initial setup of Red Canary MDR was very easy since we just had to run some simple commands.

The solution is deployed on-premises.

The deployment process takes five to ten minutes.

Red Canary MDR I use is an open-source tool.

My company chose Red Canary MDR over other solutions for its automation features.

I recommend Red Canary MDR to others because it is a good product.

If I had to do one of the projects in my company without Red Canary MDR, it would have taken me a lot of time to complete it.

I rate the overall solution a nine out of ten.

We use the solution's MDR service to monitor our Microsoft 365 environment, including Defender Endpoint.

Red Canary MDR has sped up our ability to receive alerts when there is a security event.

The first valuable feature for me is the speed of response. It provides near real-time alert reviews. And then the near real-time review translates into near real-time action. So, in addition to alerting, Red Canary MDR has response playbooks built out. 

So we're able to offload some of the immediate response actions. So if an endpoint is compromised, their response isolates that endpoint before it can do more harm.

The price could always be better. 

In future releases, I would like to see more firewall integration options for alerting.

I have been using Red Canary MDR for two months. It's a cloud service.

So far, the stability has been good. We haven't encountered any issues. It has only been two months, though, so we're not expecting problems within this relatively short time.

Scalability depends on the context. If we consider scalability across different clients, as our IT managed services provider, I would rate it excellent. We don't anticipate outgrowing them.

Customer service and support are excellent. 

Positive

The initial setup was quite straightforward. Their deployment team is extremely competent and worked with our security team to roll it out over a couple of weeks.

We have seen an ROI. We do have plans to increase the usage in the future. We're planning to start rolling it out to our customers.

The price could always be better, but we believe it's worth it. Transparently, it's a valuable security enhancement.

We have been very happy with everything, from the sales process to the implementation and deployment playbook. I'm highly content.

The best advice I can give is that Red Canary works best with a very Microsoft-centric cloud strategy. So if a business aligns with that, it's a good fit. If it's not Microsoft-centric, there might be other solutions that would fit better. That's my impression after the work we've done.

So far, we're pretty Microsoft-centric, so it's definitely the right fit for us.

Overall, I would rate it a nine out of ten because nothing is perfect. 

We use Red Canary MDR for threat protection.

The solution works well for what we use it for and the support and protection are good.

The most valuable feature of Red Canary MDR is the overall threat protection it provides.

I have been using Red Canary MDR for approximately two years.

I rate the support from Red Canary MDR a nine out of ten.

Positive

The initial deployment of Red Canary MDR was simple and took a few days.

We have an agent on all the computers and Carbon Black feeds all the information to Red Canary MDR.

The vendor did most of the setup as it is a cloud service.

The solution could vary in price depending on how many endpoints a company has.

I rate the price of Red Canary MDR a five out of ten.

I rate Red Canary MDR a nine out of ten.