Red Canary coverage of Google Cloud Platform enters general availability

Whether these bad actors actively target your admin and user accounts or exploit accidental misconfigurations, noticing suspicious activity and identifying threats can still elude even the most experienced security experts.

Cloud-native threats are exploding

As noted in Red Canary’s recent 2024 Threat Detection Report, we saw a 16x increase in cloud threats detected over the past year. The prevalence and frequency of attacks on cloud environments continue to grow, posing a challenge for organizations as they migrate or expand their cloud footprint. Many organizations struggle to effectively monitor the activity within their expansive cloud environment as it’s difficult to analyze all of the log data to parse regular user activity from real indicators of compromise. They find they don’t have the time, necessary resources and manpower, or the expertise in-house to stay on top of all the data and confidently identify and respond to threats.

Introducing Red Canary MDR for Google Cloud Platform

After being in early access for the past two months, Red Canary is ready to make our direct integration with GCP generally available. Directly ingesting telemetry log data such as Admin Activity, Data Access, Policy Denied, and System Events from GCP Audit logs enables our security operations platform to perform behavioral analytics and empowers our security experts to conduct even deeper threat investigations within your GCP environment.

While GCP provides default detection rules with native alerting in their Security Command Center and the ability to create or tune your own detections, many organizations do not have the expertise or know how to take advantage of these capabilities. Besides, developing custom detections based on your own behavioral analytics is often out of reach for most organization.

Customers partnering with Red Canary get more comprehensive cloud coverage, securing your environment and allowing your team to focus on other important business initiatives. We identify threats that other security tools (including and especially native in-built detections) miss.

Here’s what this integration means for you:

• Enhanced visibility: Red Canary taps into your GCP telemetry logs, giving you a deeper, holistic view of your cloud activity with added context and security insights.
• Faster threat detection: We analyze all that data alongside other security signals, helping you pinpoint suspicious activity and detect threats quickly and accurately.
• Deeper threat investigations: When we identify something suspicious, we perform targeted investigations to confirm or disprove threats while filtering out the noise.
• Streamlined response: If a threat is confirmed, our team of threat hunting experts will work alongside your security team to contain and remediate the issue, minimizing damage and downtime.

By combining the power of GCP and Red Canary MDR, you can be confident that your cloud environment is under constant watch by a dedicated team of security experts ready to respond to any suspicious activity.