Freedom251 › Managed Detection and Response Services
Red Canary MDR

What Red Canary MDR is
Red Canary MDR is a managed detection and response service covering endpoints, identities, cloud, and other connected security sources. Its experts monitor, investigate, and help respond to threats around the clock. The service uses behavior-based detections, threat intelligence, and threat hunts to identify suspicious activity. Customers can follow investigations in a unified timeline with information about a threat’s root cause, scope, and impact. Response combines automated capabilities with human-led action, including remediation by Red Canary experts. Integrations cover endpoint, network, cloud, identity, SaaS, and other security data sources, with examples including AWS, Microsoft, CrowdStrike, and Palo Alto Networks. Alerts can be sent to SIEM, SOAR, or ITSM platforms. The Security Data Lake can retain MDR or other raw data for a period selected by the customer. Red Canary describes the service as a complement to an existing SOC. Its integration documentation caps cloud integrations at 2,000 accounts or external services in one subdomain. Current product documentation identifies the service as Zscaler MDR. Pricing is available on request.
Who it suits
It suits organizations with an existing SOC seeking round-the-clock monitoring, investigation, and response across connected security sources. Teams should check the documented cloud integration limit against their needs.
What it does well
- Experts monitor and respond around the clock
- Uses behavior-based detections and threat hunts
- Unified timeline shows cause, scope, and impact
- Alerts can flow to SIEM, SOAR, or ITSM
- Customer-selected retention period for data lake
What to know first
- Pricing is available only on request
- Cloud integrations limited to 2,000 accounts or services per subdomain
- Product documentation identifies it as Zscaler MDR
Limits
Pricing and plan details are available on request. Cloud integrations are limited to 2,000 accounts or external services in a single subdomain.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Red Canary MDR | Pricing is not listed; request a demo or contact Red Canary for plans. | On request |
As redcanary.com lists them, read 3 Oct 2026. The maker's own page has the final word.
Getting started
- Visit https://redcanary.com/.
- Contact Red Canary or request a demo for plan and pricing details.
- Connect supported security data sources across endpoint, network, cloud, identity, SaaS, or other categories.
- Route MDR alerts into SIEM, SOAR, or ITSM workflows as needed.
- Use the API to extend platform use.
Verdict
Red Canary MDR pairs round-the-clock threat monitoring with investigation timelines and automated or expert-led response. Its integration cap and current product identity are important details to clarify before choosing it.
Questions
How much does Red Canary MDR cost?
Pricing is available on request. Red Canary asks prospective customers to request a demo or contact the company for plans.
What does Red Canary MDR cover?
It provides managed detection and response across endpoints, identities, cloud, and other connected security sources.
Does the service include threat hunting and incident response?
Yes. Detection uses threat hunts, and the service offers automated and human-led response, including expert remediation.
Can it work with existing security workflows?
Yes. MDR alerts can be sent to SIEM, SOAR, or ITSM platforms, and integrations span several security data categories.
What security certifications does Red Canary list?
Its Trust Center lists ISO 27001, ISO 27701, and SOC 2 Type II badges.
What is the product called now?
Current product documentation identifies the service as Zscaler MDR.
Facts from Red Canary MDR's own pages
- 24/7 coverage
- Red Canary says its experts monitor, investigate, and help respond to threats around the clock. · redcanary.com, 3 Oct 2026
- API
- Red Canary provides an API for extending use of its platform. · docs.redcanary.com, 3 Oct 2026
- Company identity
- Red Canary’s current product documentation says the service is now Zscaler MDR. · docs.redcanary.com, 3 Oct 2026
- Customer fit
- Red Canary describes MDR as a service that complements and enhances an organization’s existing SOC. · redcanary.com, 3 Oct 2026
- Data storage
- The Security Data Lake can store MDR or other raw data for a retention period selected by the customer. · redcanary.com, 3 Oct 2026
- Detection
- The MDR service uses behavior-based detections, threat intelligence, and threat hunts to find suspicious activity. · redcanary.com, 3 Oct 2026
- Founded
- 2014 · redcanary.com, 28 Sept 2026
- Headquarters
- Denver, Colorado, United States · redcanary.com, 28 Sept 2026
- Integration limit
- The integration documentation says cloud integrations are limited to 2,000 accounts or external services in a single subdomain. · docs.redcanary.com, 3 Oct 2026
- Integrations
- Supported integrations span endpoint, network, cloud, identity, SaaS, and other security data sources, including AWS, Microsoft, CrowdStrike, and Palo Alto Networks. · docs.redcanary.com, 3 Oct 2026
- Investigations
- Customers can review investigations in a unified timeline with context about a threat’s root cause, scope, and impact. · redcanary.com, 3 Oct 2026
- Response
- The service offers automated and human-led response capabilities, including remediation by Red Canary experts. · redcanary.com, 3 Oct 2026
- Security certifications
- Red Canary’s Trust Center lists ISO 27001, ISO 27701, and SOC 2 Type II badges. · security.redcanary.com, 3 Oct 2026
- Security practices
- The Trust Center reports annual third-party audits and penetration testing, a disaster recovery plan, and a vulnerability disclosure program. · security.redcanary.com, 3 Oct 2026
- Service
- Red Canary MDR provides managed detection and response across endpoints, identities, cloud, and other connected security sources. · redcanary.com, 3 Oct 2026
- Workflow support
- The platform can send MDR alerts to SIEM, SOAR, or ITSM platforms to fit existing workflows. · redcanary.com, 3 Oct 2026
