- Home
- Managed Detection and Response Services
- Red Canary MDR
Red Canary MDR
Denver, Colorado, United States
What it is
Red Canary MDR is a managed detection and response service that brings together security data from endpoints, identities, cloud environments, and other connected sources. Experts monitor activity around the clock, investigate suspected threats, and help coordinate a response. Behavior-based detections, threat intelligence, and threat hunts help identify suspicious activity. Customers can follow investigations in a unified timeline showing a threat’s root cause, scope, and impact. Response options include automation and remediation by Red Canary experts. Integrations cover endpoint, network, cloud, identity, SaaS, and other security sources, with examples such as AWS, Microsoft, CrowdStrike, and Palo Alto Networks. Alerts can be routed to SIEM, SOAR, or ITSM platforms. The Security Data Lake can retain MDR or other raw data for a customer-selected period. Red Canary describes the service as complementing an existing SOC. Its documentation identifies the service as now Zscaler MDR. Pricing is available on request.
For and against
For
- Experts monitor and help respond to threats around the clock.
- Investigations include root-cause, scope, and impact context.
- Supports automated and expert-led remediation.
- Integrates with endpoint, network, cloud, identity, and SaaS sources.
- Raw data retention period is customer-selected.
Against
- Pricing is available on request.
- Cloud integrations are limited to 2,000 accounts or external services per subdomain.
- Product documentation now identifies the service as Zscaler MDR.
The verdict
Red Canary MDR combines managed threat monitoring and response with integrations and workflow routing for an existing SOC. Organizations should account for the stated cloud-integration limit and request pricing directly.
Who it suits
It suits organizations looking to extend an existing SOC with managed monitoring, investigations, threat hunting, and response. Teams can route alerts into SIEM, SOAR, or ITSM workflows.
Plans and prices
Red Canary MDR
Pricing is not listed; request a demo or contact Red Canary for plans.
Read 3 Oct 2026 · redcanary.com
On the record
- 24/7 coverage
- Red Canary says its experts monitor, investigate, and help respond to threats around the clock.redcanary.com · read 3 Oct 2026
- API
- Red Canary provides an API for extending use of its platform.docs.redcanary.com · read 3 Oct 2026
- Company identity
- Red Canary’s current product documentation says the service is now Zscaler MDR.docs.redcanary.com · read 3 Oct 2026
- Customer fit
- Red Canary describes MDR as a service that complements and enhances an organization’s existing SOC.redcanary.com · read 3 Oct 2026
- Data storage
- The Security Data Lake can store MDR or other raw data for a retention period selected by the customer.redcanary.com · read 3 Oct 2026
- Detection
- The MDR service uses behavior-based detections, threat intelligence, and threat hunts to find suspicious activity.redcanary.com · read 3 Oct 2026
- Integration limit
- The integration documentation says cloud integrations are limited to 2,000 accounts or external services in a single subdomain.docs.redcanary.com · read 3 Oct 2026
- Integrations
- Supported integrations span endpoint, network, cloud, identity, SaaS, and other security data sources, including AWS, Microsoft, CrowdStrike, and Palo Alto Networks.docs.redcanary.com · read 3 Oct 2026
- Investigations
- Customers can review investigations in a unified timeline with context about a threat’s root cause, scope, and impact.redcanary.com · read 3 Oct 2026
- Response
- The service offers automated and human-led response capabilities, including remediation by Red Canary experts.redcanary.com · read 3 Oct 2026
- Security certifications
- Red Canary’s Trust Center lists ISO 27001, ISO 27701, and SOC 2 Type II badges.security.redcanary.com · read 3 Oct 2026
- Security practices
- The Trust Center reports annual third-party audits and penetration testing, a disaster recovery plan, and a vulnerability disclosure program.security.redcanary.com · read 3 Oct 2026
- Service
- Red Canary MDR provides managed detection and response across endpoints, identities, cloud, and other connected security sources.redcanary.com · read 3 Oct 2026
- Workflow support
- The platform can send MDR alerts to SIEM, SOAR, or ITSM platforms to fit existing workflows.redcanary.com · read 3 Oct 2026
