Red Canary and Palo Alto Networks Expand Partnership

Red Canary can now ingest raw telemetry from Cortex XDR, building on existing integrations with PAN-OS, Advanced Threat Prevention, and WildFire

DENVER, Dec. 12, 2022 /PRNewswire/ -- Red Canary today announced a new integration with Palo Alto Networks (NASDAQ: PANW), adding Cortex XDR and broadening its detection coverage for mutual customers. This deepening of the partnership between the two companies builds on existing Red Canary integrations, including PAN-OS, Advanced Threat Prevention, and WildFire.

Red Canary analyzes petabytes of data every day, applying advanced analytics to volumes of alerts and raw telemetry to perform thousands of investigations. For mutual customers, Red Canary can now investigate Cortex XDR detections from all Cortex XDR data sources, including network, endpoint, cloud, and third-party data, helping to provide enterprise-wide monitoring. Cortex XDR's Native IOCs and BIOC alert types are correlated with Red Canary's detections across the IT environment to provide additional validation and context, all delivered in a unified timeline.

Cortex XDR offers various response actions that enables customers to investigate the endpoint and take immediate action to remediate it. Red Canary customers can now also use response actions to isolate an endpoint for faster remediation.

While many MDR offerings simply ingest alerts generated by endpoint security tools, Red Canary's approach reduces false positives by up to 99% and significantly increases the detection of confirmed threats.

"Red Canary provides MDR across our customers' IT environments by analyzing data from leading security tools," said Chris Rothe, CTO, Red Canary. "Obviously, Palo Alto Networks is a fundamental part of many organizations' security stack and we are very excited to integrate with Cortex XDR to provide more choice and better security for our customers."

"The detailed endpoint telemetry generated by Cortex XDR enables outstanding scores in actual hands-on tests, such as MITRE Engenuity's recent ATT&CK^® evaluation for Enterprise," said Tom Barsi, Vice President of Worldwide Cortex Ecosystems, Palo Alto Networks. "Red Canary's ability to manage and analyze large volumes of endpoint, network, and other types of telemetry make them an ideal partner for solving customers' most pressing security challenges. Together, we can help protect organizations from ransomware, phishing, and other modern threats."

To learn more about this partnership, attendees of Palo Alto Networks Ignite '22 can visit Red Canary at booth #510.

Red Canary stops cyber threats no one else does, so organizations can fearlessly pursue their missions. We do it by delivering managed detection and response (MDR) across enterprise endpoints, cloud workloads, network, identities, and SaaS apps. As a security ally, we define MDR in our own terms with unlimited 24×7 support, deep threat expertise, hands-on remediation, and by doing what's right for customers and partners.

Product or service names mentioned herein may be the trademarks of their respective owners.

SOURCE Red Canary