Can you tell me about Red Canary’s technology?
Our goal is to detect what gets past traditional and even next-generation antivirus or defense products. We think of ourselves as the last line of defense, monitoring everything that happens on every endpoint and looking for signs that attackers are bypassing your security controls or prevention technologies.
The other piece to our product is being an ally to our customers. We don’t just generate alerts back to the customer with no context. We do a full investigation and then if they do have a compromise, we will work very closely with them to help them remediate the threat and understand what they can do to improve their defenses going forward. That overall mission of being an ally and helping security teams get better over time is what we really care about.
What is your core product?
Our core product falls into the managed detection and response (MDR) area. For most of our customers, what they buy from Red Canary is Red Canary Managed Detection and Response, which is 24/7 monitoring for signs of attack that may have bypassed their prevention technology.
What do you feel is the number one threat in cybersecurity today?
It depends on who you are as a business or as an individual and depends on what you have. We see a lot of organizations like school districts and hospitals getting targeted by ransomware, which is malware where the adversary attempts to extort the organization for money in exchange for getting their data back.
But if you are a high-tech firm that has a lot of intellectual property, you’re more likely to be targeted by a nation-state or corporate espionage. These entities would be attempting to use very quiet techniques to break in and steal your data. For most of the population, ransomware is the thing that’s most destructive and painful to deal with.