Startup Red Canary is offering an endpoint detection and response service based in the cloud that is backed up by a team of analysts who weed out false alarms.
The service, called Red Canary, takes data gathered from customer endpoints, analyzes it and delivers alerts to customers so they can take steps to block attacks.
While the service uses its own behavioral analysis, code analysis, and base-lining tools, it relies on Bit9+CarbonBlack for endpoint sensors. It gathers threat intelligence on its own and supplements it with the resources of Threat Recon, Farsight Security and Bit9+CarbonBlack’s Threat Intelligence Cloud.
So customers would buy the service, deploy the endpoint sensors and await notification from Red Canary analysts about intrusions they should worry about. Hiring the company takes the burden off customers of running an in-house detection system such as hiring staff with the proper expertise. They may also be overwhelmed by the number of alerts they receive from such platforms and have trouble deciding which get priority.
The price range for the serivce is $80-$120 per endpoint depending on the size of the organization.
The company has four co-founders – CEO Brian Beyer, head of detection operations Keith McCammon, research and development chief Jason Garman and engineer Chris Rothe – all have a common background at security firm Kyrus, which is backing the company with $2.5 million in seed funding.