Skip to content
SPECIFICTION
Get listed

Red Canary MDR

redcanary.com

WebAPI
Visit redcanary.com
Spec score 6.9 #21 of 32 in Managed Detection and Response Services

What it is

Red Canary MDR is a managed detection and response service covering endpoints, identities, cloud environments, and other connected security sources. Experts monitor, investigate, and help respond to threats around the clock. Detection uses behavior-based methods, threat intelligence, and threat hunts to identify suspicious activity. Customers can follow investigations in a unified timeline showing a threat’s root cause, scope, and impact. Response combines automated actions with human-led work, including remediation by Red Canary experts. Integrations span endpoint, network, cloud, identity, SaaS, and other security data, with examples including AWS, Microsoft, CrowdStrike, and Palo Alto Networks. Alerts can be sent to SIEM, SOAR, or ITSM platforms. The Security Data Lake stores MDR or other raw data for a retention period selected by the customer. Red Canary describes the service as complementing an existing SOC. Its Trust Center lists ISO 27001, ISO 27701, and SOC 2 Type II, plus annual audits, penetration testing, disaster recovery, and vulnerability disclosure practices. Current product documentation identifies it as Zscaler MDR. Pricing is on request.

Spec sheet

API
Red Canary provides an API for extending use of its platform.Read 3 Oct 2026 · docs.redcanary.com
Integrations
Supported integrations span endpoint, network, cloud, identity, SaaS, and other security data sources, including AWS, Microsoft, CrowdStrike, and Palo Alto Networks.Read 3 Oct 2026 · docs.redcanary.com
Headquarters
Denver, Colorado, United StatesRead 28 Sep 2026 · redcanary.com
Founded
2014Read 28 Sep 2026 · redcanary.com
24/7 coverage
Red Canary says its experts monitor, investigate, and help respond to threats around the clock.Read 3 Oct 2026 · redcanary.com
Company identity
Red Canary’s current product documentation says the service is now Zscaler MDR.Read 3 Oct 2026 · docs.redcanary.com
Customer fit
Red Canary describes MDR as a service that complements and enhances an organization’s existing SOC.Read 3 Oct 2026 · redcanary.com
Data storage
The Security Data Lake can store MDR or other raw data for a retention period selected by the customer.Read 3 Oct 2026 · redcanary.com
Detection
The MDR service uses behavior-based detections, threat intelligence, and threat hunts to find suspicious activity.Read 3 Oct 2026 · redcanary.com
Integration limit
The integration documentation says cloud integrations are limited to 2,000 accounts or external services in a single subdomain.Read 3 Oct 2026 · docs.redcanary.com
Investigations
Customers can review investigations in a unified timeline with context about a threat’s root cause, scope, and impact.Read 3 Oct 2026 · redcanary.com
Response
The service offers automated and human-led response capabilities, including remediation by Red Canary experts.Read 3 Oct 2026 · redcanary.com
Security certifications
Red Canary’s Trust Center lists ISO 27001, ISO 27701, and SOC 2 Type II badges.Read 3 Oct 2026 · security.redcanary.com
Security practices
The Trust Center reports annual third-party audits and penetration testing, a disaster recovery plan, and a vulnerability disclosure program.Read 3 Oct 2026 · security.redcanary.com
Service
Red Canary MDR provides managed detection and response across endpoints, identities, cloud, and other connected security sources.Read 3 Oct 2026 · redcanary.com
Workflow support
The platform can send MDR alerts to SIEM, SOAR, or ITSM platforms to fit existing workflows.Read 3 Oct 2026 · redcanary.com

Plans and prices

Red Canary MDR Priced on request Pricing is not listed; request a demo or contact Red Canary for plans. Read 3 Oct 2026 · redcanary.com

Every Red Canary MDR plan and price →

Strong points and limits

Strong points

  • 24/7 expert monitoring
  • Behavior-based detections and threat hunts
  • Automated and human-led response
  • SIEM, SOAR, and ITSM alerting
  • Customer-selected data retention

Limits

  • Cloud integrations limited to 2,000 accounts
  • Pricing is available only on request
  • Current documentation calls it Zscaler MDR

Who it suits

It suits organizations with an existing SOC that want managed monitoring, threat hunting, investigation, and coordinated response across multiple security sources.

Verdict

Red Canary MDR adds continuous detection, investigation, and response across broad security inputs while fitting existing SOC workflows. Buyers should confirm integration scale and the product’s current Zscaler MDR identity.

Where Specifiction places it

Alternatives to Red Canary MDRAll alternatives →