Expel vs Red Canary comparison

Expel and Red Canary are both solutions in the Managed Detection and Response (MDR) category. Expel is ranked #18 with an average rating of 9.0, while Red Canary is ranked #11 with an average rating of 9.0. Expel holds a 1.9% mindshare in MDR, compared to Red Canary’s 4.6% mindshare. Additionally, 100% of Expel users are willing to recommend the solution, compared to 100% of Red Canary users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Dec 8, 2024

Expel and Red Canary are in the cybersecurity solutions category, each offering distinctive strengths. Red Canary tends to have the upper hand due to its advanced threat detection services.

Features: Expel focuses on integrated security operations and automation, providing clear visibility into threats and actionable insights. Red Canary provides advanced threat detection capabilities, comprehensive endpoint protection, and in-depth analysis of potential threats.

Ease of Deployment and Customer Service: Expel offers quick deployment with seamless integration and reliable support. Red Canary involves a more complex deployment process but compensates with comprehensive customer service.

Pricing and ROI: Expel's competitive pricing minimizes setup costs, offering quick ROI for budget-focused organizations. Red Canary's pricing reflects higher initial costs, justified by significant long-term returns from enhanced threat detection.

To learn more, read our detailed Managed Detection and Response (MDR) Report (Updated: December 2024).

Buyer's Guide

Managed Detection and Response (MDR)

December 2024

Download the complete report

Helped 824,053 peers since 2012

Categories and Ranking

Binary Defense MDR

Mindshare comparison

As of December 2024, in the Managed Detection and Response (MDR) category, the mindshare of Binary Defense MDR is 0.6%, up from 0.4% compared to the previous year. The mindshare of Expel is 1.9%, down from 2.2% compared to the previous year. The mindshare of Red Canary is 4.6%, down from 4.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Managed Detection and Response (MDR)

Featured Reviews

Rich Ullom

AVP, IT Security Compliance and Audit/Information Security Officer at Western Reserve Group

Worth the money, fantastic communication, and fast service with an average response time of about four minutes on an alert

This is my third SOC. I have never had anybody react as well. So, it's hard for me to provide something that they could do better because I'm really happy with them. I just signed another three-year contract with them. I don't find any downside to them, but if I have to put one, it would be consistent manpower or staffing. The only area where the solution can be improved is going to be with people. As they grow, they are struggling with the same thing that every other company is, which is getting talent and getting that talent to stay, but they've just revised their tiering system to go from a flat analyst and manager to a three-tier solution where it goes through two or three before it gets elevated. That seems to have worked out well, so if one level misses it, the next one picks it up, and it works out fine. Consistent staffing is the only challenge they have because when you're hiring level-one analysts, you go through them pretty quickly. You'll probably hire them at 50K or 55K, and after they do it for a year, they find out they can make 85K somewhere else, and they bounce. So, their turnover is a little high, but that's it.

Read full review

reviewer2578461

MDR Specialist at GuidePoint Security

Rapid threat management and diverse technology integration for effective monitoring

Expel has made it easier for companies to monitor and manage various log sources. With its vast integration portfolio, customers can efficiently monitor diverse environments. Time to value is quick, as Expel can turn their service up very rapidly. They have both automated active responses and human processes that quicken threat resolution.

Read full review

Sagar Shekhar

Cyber Security Analyst at TIAA

An open-source tool that offers great automation capabilities

Red Canary MDR generates a lot of output, so it would be good if, in the end, it generates a summary of all the previous attacks and what was the outcome of a single attack, especially so that it becomes easy for the user to see the summary and analyze the whole thing. In general, the solution currently fails to provide a summary to its users.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable features are the SIEM and the ticketing function; the latter is very smooth and easy to read and understand. We don't have any issues looking at the ticketing information when we're trying to identify what's going on."

"With Binary Defense, we don't just get an alert, but also a detailed rundown of why they're alerting us on it. They tell us what was executed, or the username, script, or IP. That way, we're not wasting time investigating."

"The best part about Binary Defense MDR is that it runs on everything, and they keep an eye on things 24/7."

"Binary Defense's most valuable feature is the 24/7 monitoring and threat hunting. Their team checks the latest breaches and how they're done."

"The customization has been the most valuable aspect and was really the reason we ended up selecting Binary Defense. They worked with us to provide exactly the level of support, features, response, and collaboration we needed."

"In the six months we have been with Binary Defense on this, they run with the ball. They take care of our problems. When we get a ticket, they do not just give us a report."

"Binary Defense has a human service department that provides live monitoring for our systems."

"The most valuable feature is reviewing tickets and the notes added by technicians."

More Binary Defense MDR pros

"Their threat hunting protocol and process with AI and machine learning are strong, allowing for active and rapid responses."

"The most valuable feature of the solution is its automation part."

"The near real-time review translates into near real-time action. So, in addition to alerting, Red Canary MDR has response playbooks built out."

"The solution works well for what we use it for and the support and protection are good."

"The valuable features of this solution are it integrates well with different EDR software, such CrowdStrike, and Carbon Black, and the information it provides is helpful."

Cons

"The most significant area for improvement is in support for non-English speakers; we're a global organization, so many of our users are not English speakers, which can make interacting with them a challenge. There's no Chinese language support, so we must rely on what we can do with the internet. We don't expect Binary Defense to build a language staff, but details can get lost in translation when we assume the whole world speaks English."

"I would like to get more reports from Binary Defense about what they're blocking."

"Binary Defense MDR could be even better with additional features, like automatic scans and file quarantine."

"The only area for improvement that I can think of relates to statistical analysis for SLAs. They are in the middle of moving to a new product called D3 which is going to do some backend work for them. I know they are working to improve some of the help desk statistics, such as the time the tickets open and the time they are closed."

"While my understanding is that they're working on this, I would like to see some more of the quantification or reporting."

"We found that an earlier version of the agent had high memory usage and that was a bit concerning, but we raised the concern with their support team and they immediately replied that they had noticed the same thing and had a candidate fix already available... it totally fixed the issue."

"I don't find any downside to them, but if I have to put one, it would be consistent manpower or staffing. The only area where the solution can be improved is going to be with people. As they grow, they are struggling with the same thing that every other company is, which is getting talent and getting that talent to stay, but they've just revised their tiering system to go from a flat analyst and manager to a three-tier solution where it goes through two or three before it gets elevated. That seems to have worked out well, so if one level misses it, the next one picks it up, and it works out fine."

"I would like to see more frequent check-ins with our security status."

More Binary Defense MDR cons

"The one area where Expel may not measure up is if a customer requires a managed SIEM as part of their overall solution. There's a gap there, and solutions might require third-party assistance for management."

"The most valuable feature of Red Canary MDR is the overall threat protection it provides."

"In general, the solution currently fails to provide a summary to its users."

"The price could always be better."

"I would like there to be an on-premise version of this solution for our data centers because of the proliferation of online threats."

Pricing and Cost Advice

"The pricing is on target. Working with their sales team on pricing negotiations was a pleasant process. They were very respectful of the constraints we had and I feel that we're paying a fair price."

"It's valued at the right price. Even with the number of endpoints we have, we don't feel that it's a lot more than any competitor. In fact, it might be less expensive when you look at the fact that you're getting a full flex SOC out of it along with the tools."

"It has been good. We have saved money, and we have a better product."

"Binary Defense MDR is priced competitively and may be slightly lower than CrowdStrike."

"After we acquired this platform, we met with a number of different vendors. Binary Defense came in with a proposal that was surprisingly affordable. In fact, we were able to recoup the cost of their services within a short period of time. This is because Binary Defense is able to provide the same level of security as a team of two or three in-house analysts but at a fraction of the cost. As a result, Binary Defense is saving us an estimated $250,000 to $300,000 per year."

"Binary Defense has changed its pricing model from being primarily based on the volume of data to one based on escalations and incidents they handle."

"The pricing isn't that bad, it's very competitive. I don't feel that it's over-priced and I don't feel that it's under-priced."

"The pricing is very good. They are definitely competitive and they were lower at the time that we went with them."

More Binary Defense MDR pricing and cost advice

Information not available

"Red Canary MDR I use is an open-source tool."

"I have not compared Red Canary to other solutions to know if the price is high or low. However, I have found the price of this solution fair and reasonable, it cost approximately $100 per year, per device. If they could provide the solution for $50 per year, per device, it would be better."

"The solution could vary in price depending on how many endpoints a company has."

See which vendors are best for you

Use our free recommendation engine to learn which Managed Detection and Response (MDR) solutions are best for your needs.

See recommendations

824,053 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

17%

Healthcare Company

Financial Services Firm

Manufacturing Company

Computer Software Company

20%

Financial Services Firm

Manufacturing Company

Real Estate/Law Firm

Educational Organization

20%

Computer Software Company

13%

Financial Services Firm

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

Questions from the Community

What do you like most about Binary Defense MDR?

The most valuable feature is reviewing tickets and the notes added by technicians.

See all answers

What is your experience regarding pricing and costs for Binary Defense MDR?

It has been good. We have saved money, and we have a better product. We are a company that has become an enterprise f...

See all answers

What needs improvement with Binary Defense MDR?

We are going to have a meeting with them the following Monday. It will be our first quarterly business review. Half o...

See all answers

What is your experience regarding pricing and costs for Expel?

Expel's pricing has adapted as the market evolved and has become competitive over the past twelve months.

See all answers

What needs improvement with Expel?

The one area where Expel may not measure up is if a customer requires a managed SIEM as part of their overall solutio...

See all answers

What is your primary use case for Expel?

I have experience reselling Expel. Customers often come to me wanting to evaluate multiple providers to make a choice...

See all answers

What do you like most about Red Canary MDR?

The most valuable feature of the solution is its automation part.

See all answers

What is your experience regarding pricing and costs for Red Canary MDR?

Red Canary MDR I use is an open-source tool.

See all answers

What needs improvement with Red Canary MDR?

Red Canary MDR generates a lot of output, so it would be good if, in the end, it generates a summary of all the previ...

See all answers

Comparisons

CrowdStrike Falcon vs Binary Defense MDR

Compared 25% of the time

SentinelOne Singularity Complete vs Binary Defense MDR

Compared 21% of the time

Darktrace vs Binary Defense MDR

Compared 21% of the time

Arctic Wolf Managed Detection and Response vs Binary Defense MDR

Compared 18% of the time

Cortex XDR by Palo Alto Networks vs Binary Defense MDR

Compared 16% of the time

More Binary Defense MDR Competitors

CrowdStrike Falcon Complete MDR vs Expel

Compared 24% of the time

Arctic Wolf Managed Detection and Response vs Expel

Compared 17% of the time

Wiz vs Expel

Compared 13% of the time

ReliaQuest GreyMatter vs Expel

Compared 12% of the time

Secureworks Taegis Managed XDR / MDR vs Expel

Compared 4% of the time

More Expel Competitors

CrowdStrike Falcon Complete MDR vs Red Canary

Compared 27% of the time

Arctic Wolf Managed Detection and Response vs Red Canary

Compared 23% of the time

Huntress Managed EDR vs Red Canary

Compared 6% of the time

BlueVoyant CORE vs Red Canary

Compared 5% of the time

Rapid7 MDR vs Red Canary

Compared 5% of the time

More Red Canary Competitors

Product Reports

Buyer's Guide

Binary Defense MDR

December 2024

Download Binary Defense MDR product report

Buyer's Guide

Managed Detection and Response (MDR)

December 2024

Download Expel product report

Buyer's Guide

Managed Detection and Response (MDR)

December 2024

Download Red Canary product report

Also Known As

Binary Defense Vision, Binary Defense Managed Detection and Response, Binary Defense Managed Detection & Response

Workbench, Expel SOC-as-a-Service

Red Canary Managed Detection and Response (MDR)

Learn More

Binary Defense

Video not available

Expel

Red Canary

Overview

Binary Defense provides a Managed Detection and Response service using an Open XDR strategy that detects and isolates threats early in the attack lifecycle. Expert security analysts in the Binary Defense Security Operations Center leverage an attacker’s mindset, monitoring your environments for security events 24x7x365 and acting as an extension of your security teams. When a security event occurs, Binary Defense analysts triage, disposition, and prioritize the event. Analysts conduct full kill chain analysis and supply tactical and strategic mitigation recommendations to your security team with the goal of increasing your organization’s security posture against the latest adversary threats.

Visit us online at https://www.binarydefense.com

Expel offers comprehensive security monitoring and incident response, detecting threats efficiently, providing actionable insights, and reducing security risks. It enhances a company's security posture and frees up internal resources by integrating with existing security tools and offering support from experienced analysts.

Expel is designed for real-time monitoring, effective threat detection, and automated response capabilities. Users appreciate its intuitive dashboard, timely alerts, and comprehensive reporting. Integration with existing security systems and minimal maintenance requirements are key advantages. Customer support is noted as exceptional. Some users suggest improvements in alert categorization to reduce noise, a more intuitive dashboard design with better customization, faster response times, more comprehensive threat analysis reports, and enhanced communication with customer support.

What are Expel's key features?

Real-time monitoring: Continuously keeps track of potential threats and network activity.
Effective threat detection: Identifies suspicious behavior and potential security breaches quickly.
Automated response: Responds to threats automatically to mitigate risks efficiently.
Intuitive dashboard: User-friendly interface for navigating security operations.
Timely alerts: Provides immediate notifications about potential security incidents.
Comprehensive reporting: Generates detailed analyses of security events for better decision-making.
Integration capabilities: Works seamlessly with existing security systems.
Minimal maintenance: Requires little upkeep from internal teams.

What benefits should users look for in Expel?

Enhanced security posture: Strengthens overall defenses against cyber threats.
Resource optimization: Allows internal teams to focus on strategic tasks.
Experienced analysts: Provides expert support from seasoned security professionals.
Actionable insights: Delivers data-driven recommendations for security improvements.
Integration ease: Fits smoothly with pre-existing security tools and infrastructures.

Expel is implemented across various industries that require robust security measures. In the financial sector, it helps safeguard sensitive data and ensure compliance. Healthcare organizations use Expel to protect patient records and meet strict regulatory standards. Retail companies leverage its capabilities to secure customer information and transaction data, while manufacturing entities rely on Expel to secure intellectual property and operational technology networks.

Red Canary Managed Detection and Response (MDR) offers robust threat detection, rapid response capabilities, continuous security monitoring, and seamless integration with existing tools. Valued for its actionable reporting and proactive threat intelligence, it streamlines operations and enhances organizational efficiency and security.

Sample Customers

Securitas USA, Black Hills Energy, Lincoln Electric,The J.M. Smuckers Company, New York Community Bank, State of Connecticut, NCR

Amanda Fennell CSO

DuPont, Quanta Services, Microchip Technology, Hopkins Public Schools, Henny Penny, Schumacher Homes

Buyer's Guide

Managed Detection and Response (MDR)

December 2024

Download Free Report

Find out what your peers are saying about CrowdStrike, Arctic Wolf Networks, Huntress and others in Managed Detection and Response (MDR). Updated: December 2024.

DOWNLOAD NOW

824,053 professionals have used our research since 2012.

See our list of best Managed Detection and Response (MDR) vendors.

We monitor all Managed Detection and Response (MDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.