Red Canary Managed Detection and Response

What do you like best about the product?

Red Canary is always willing to jump on a call or provide resources for hurdles and roadblocks we have had. The account manager team seems to really focus on their individual clients and being a liaison at any time. The team has always seemed very knowledgeable and willing to investigate more if questions arise.

From their CEO to IC's, they seem very down to earth and always looking for feedback to improve the overall business.

Partnership with them allows our Security team to focus on larger security projects while significantly decreasing alert fatigue on the day to day. The UI is intuitive and easy to maneuver around.

Their integrations are essential to our overall security monitoring/alerting. The implementations of them are very straight-forward and documented well.

Pricing is on par with our needs.

What do you dislike about the product?

Some of the dislikes would be:
- Not FedRAMP authorized...yet.
- At times the customer service response times are not ideal, but seems to be getting better.

What problems is the product solving and how is that benefiting you?

Day to day alert fatigue and a triage branch of our operations. Also a source of threat intel source and consultant.

What do you like best about the product?

Thorough coverage, efficent response times, automated playbooks, excellent customer support, and thoughtful design of services and technical capabilities

What do you dislike about the product?

Limited search options in the threat tray and reporting is very high level

What problems is the product solving and how is that benefiting you?

24/7 threat detection and automated altering/response. Environment-specific threat hunting with a dedicated team. Application management and helps enfore security policies

What do you like best about the product?

Catalina is a small to medium size company which some MSSP may put less priority when it comes to coverage however throughout the many years with Red Canary and working with their team, never once have I felt as if we weren't a priority client to them.

From their customer support, incident response, threat investigation and continous hands-on helping deploy and technology and secure our environment, Red Canary always provide timely and extremely effective services!

Also the Threat Investigation integration abilities to add all of our security sources to a single centralized review area has definitly made my and our analysts life easier! (with continous new source options rolling out)

What do you dislike about the product?

I wouldn't go so far as say "dislike", but rather a weakness that has seen continous improvement throught the years is the Red Canary portal. As they need to have it operational for all their customers and not specific for everyone, there can be some limitations or hard time placing feature requests if not enough clients also make the ask. Filtering can be very case sensitive, tagging had some improvements done and myself had some redirect issues something when accessing the home page itself.

But overall comparing starting day to where it is now, it's definitly in a much more comfortable position with great reports readily available, more easily navigable and quick automation rules that can be placed.

What problems is the product solving and how is that benefiting you?

Red Canary monitores and provides access to our EDR agents and other Security sources under a unified protal which we have been using as evidence for SOC2 controls as well as all incidents triaging. The Threat Investigation concern gives us almost a "mini-SIEM" option that, while transitioning from actual SIEM solutions, we knew we still had a data point collecting our firewall, EDR, Azure and other alert sources (while it's not at the logs level of a SIEM, we never felt as if we had a full blind spot).

What do you like best about the product?

Prompt response to incident, detailed notes on steps taken to remediate

What do you dislike about the product?

No negative using RC, they have been pretty much responsive in responding to any questions I do have

What problems is the product solving and how is that benefiting you?

Shifting security to Red Canary

What do you like best about the product?

Fantastic threat detection and response, equally fantastic customer service. Not a replacement for our SOC, but a true collaborative and strategic partner.

What do you dislike about the product?

Really can't think of anything we dislike.

What problems is the product solving and how is that benefiting you?

Resiliency - 24/7 SOC operations. Able to maintain coverage and efficacy of our security program independent of staffing.