What do Blackpoint Cyber and Red Canary sell?

Blackpoint Cyber sells CompassOne and Attack Surface Management. Red Canary sells Managed Detection & Response (MDR).

Are Blackpoint Cyber and Red Canary in the same category?

Yes. MDR and managed SOC is the primary category of both on CISO Tribune.

Who owns Blackpoint Cyber and Red Canary?

Red Canary is owned by Zscaler, since 2025.

Who are Blackpoint Cyber and Red Canary sold to?

Blackpoint Cyber states that it provides managed detection and response to organizations of all sizes around the world. From its own pages, Red Canary sells mainly to security operations teams that need to scale protection without adding headcount.

Vendor comparison · 2 companies

Blackpoint Cyber vs Red Canary

Blackpoint Cyber sells managed detection and response to organizations of all sizes around the world, along with the CompassOne platform. Red Canary, now part of Zscaler, sells Managed Detection & Response (MDR), a service that taps in-house experts to detect, manage, respond to, and remediate threats at scale. CISO Tribune files both under MDR and managed SOC. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

Blackpoint Cyber
Red Canary

Add a company

Blackpoint Cyber vs Red Canary: Products, Customers and Funding Compared
What it sells
	Blackpoint CyberBlackpoint Cyber sells managed detection and response to organizations of all sizes around the world, along with the CompassOne platform.blackpointcyber.com	Red CanaryRed Canary, now part of Zscaler, sells Managed Detection & Response (MDR), a service that taps in-house experts to detect, manage, respond to, and remediate threats at scale.redcanary.com
What it sells	CompassOne^[1][4][5]A platform that consolidates siloed tools and signals, uniting prevention and detection. Attack Surface Management^[5]Unifies asset, vulnerability, and security event data into a single view across client environments.	Managed Detection & Response (MDR)^[3]Taps in-house experts to detect, manage, respond to, and remediate threats at scale.
Categories
Categories	MDR and managed SOC (primary category) Identity threat detection and response SIEM Vulnerability management	MDR and managed SOC (primary category) Threat intelligence
Headquarters
Headquarters	Not stated on its pages	Not stated on its pages
Founded
Founded	Not stated on its pages	Not stated on its pages
Ownership and funding
Ownership and funding	Not stated on its pages	Owned by Zscaler since 2025^[2][3][4]
Named customers
Named customers	Not stated on its pages	Not stated on its pages
Recent news
Recent news	Not stated on its pages	Not stated on its pages
G2 and Gartner Peer Insights
G2 and Gartner Peer Insights	G2: listed, seen November 10, 2026^[6] Gartner Peer Insights: Not stated on its pages	G2: listed, seen October 27, 2026^[4] Gartner Peer Insights: Not stated on its pages
Who it fits
Who it fits	Blackpoint Cyber states that it provides managed detection and response to organizations of all sizes around the world. Blackpoint Cyber describes businesses as under pressure from tool sprawl and limited resources. Its attack surface management covers on-premises, cloud, and hybrid environments.	From its own pages, Red Canary sells mainly to security operations teams that need to scale protection without adding headcount. Its service is aimed at organizations whose attack surface spans networks, endpoints, identities, cloud infrastructure, and AI applications. Organizations that run AWS, GCP, or Azure environments are covered by its cloud detection. Teams that use a SIEM, SOAR, or ITSM platform can send alerts into those workflows.
Last verified
Last verified	November 2, 2026	September 27, 2026

Where they overlap

MDR and managed SOC is the primary category of both Blackpoint Cyber and Red Canary.

Where they differ, field by field

Blackpoint Cyber is also filed under Identity threat detection and response, SIEM and Vulnerability management. Red Canary is also filed under Threat intelligence.
Blackpoint Cyber lists CompassOne and Attack Surface Management. Red Canary lists Managed Detection & Response (MDR).
Red Canary is owned by Zscaler, since 2025.

How they differ

CISO Tribune files both Blackpoint Cyber and Red Canary under MDR and managed SOC as the primary category. Blackpoint Cyber also sits under Identity threat detection and response, SIEM, and Vulnerability management, while Red Canary is also filed under Threat intelligence. Red Canary sells Managed Detection & Response (MDR), a service that taps in-house experts to detect, manage, respond to, and remediate threats at scale. Blackpoint Cyber sells managed detection and response along with the CompassOne platform.

Blackpoint Cyber also sells Attack Surface Management, which unifies asset, vulnerability, and security event data across client environments, from endpoints to cloud to identity. It states that it offers a 24/7 human-led, AI-accelerated SOC. Red Canary describes its MDR as 24/7 human-led, AI-powered support enriched with Zscaler context. Its MDR can isolate endpoints via EDR, suspend users via the customer's IDP, and send alerts to a SIEM, SOAR, or ITSM platform.

Red Canary has been owned by Zscaler since 2025. Blackpoint Cyber states that it provides managed detection and response to organizations of all sizes around the world. Red Canary's own pages describe sales mainly to security operations teams that need to scale protection without adding headcount. Blackpoint Cyber describes businesses as facing tool sprawl and limited resources.

What it sells: Blackpoint Cyber

What CompassOne does^[1][4][5]: CompassOne is a platform offered to businesses. CompassOne covers how assets relate to one another and how they contribute to risk, with contextual relationships to findings such as vulnerabilities, weaknesses, and security events.
What Attack Surface Management does^[5]: Blackpoint Cyber attack surface management unifies asset, vulnerability, and security event data across client environments, from endpoints to cloud to identity. It brings together asset discovery, threat detection, vulnerabilities, and posture management into one platform. It covers on-premises, cloud, and hybrid environments and includes an asset inventory of devices, identities, users, and applications.

What it sells: Red Canary

What Managed Detection & Response (MDR) does^[3]: Managed Detection & Response (MDR) uses in-house experts, AI agents, and deep ZIA integration. Alerts can be sent to a SIEM, SOAR, or ITSM platform.

Questions about Blackpoint Cyber and Red Canary

What do Blackpoint Cyber and Red Canary sell?: Blackpoint Cyber sells CompassOne and Attack Surface Management. Red Canary sells Managed Detection & Response (MDR).
Are Blackpoint Cyber and Red Canary in the same category?: Yes. MDR and managed SOC is the primary category of both on CISO Tribune.
Who owns Blackpoint Cyber and Red Canary?: Red Canary is owned by Zscaler, since 2025.
Who are Blackpoint Cyber and Red Canary sold to?: Blackpoint Cyber states that it provides managed detection and response to organizations of all sizes around the world. From its own pages, Red Canary sells mainly to security operations teams that need to scale protection without adding headcount.

About Blackpoint Cyber

Blackpoint Cyber sells managed detection and response to organizations of all sizes around the world, along with the CompassOne platform. Blackpoint Cyber offers a 24/7 human-led, AI-accelerated SOC. Blackpoint Cyber describes businesses as under constant pressure to serve clients, juggle tool sprawl, and close security gaps with limited resources. Blackpoint Cyber states that alert-only MDR adds noise instead of relief and leaves attackers room to spread.^[3][4]

CompassOne is a platform offered to businesses. Blackpoint Cyber says its platform consolidates siloed tools and signals, uniting prevention and detection. CompassOne covers how assets relate to one another and how they contribute to risk, with contextual relationships to findings such as vulnerabilities, weaknesses, and security events.^[4][5]

Blackpoint Cyber offers attack surface management that unifies asset, vulnerability, and security event data into a single, contextualized view across client environments, from endpoints to cloud to identity. Blackpoint Cyber brings together asset discovery, threat detection, vulnerabilities, and posture management into one platform. Blackpoint Cyber attack surface management covers on-premises, cloud, and hybrid environments. Blackpoint Cyber attack surface management builds and updates the relationships between assets, threats, and vulnerabilities across the entire attack surface.^[1][2][5]

Blackpoint Cyber attack surface management integrates with EDRs, Microsoft 365, Google Workspace, identity providers, firewalls, and vulnerability scanners, to automate asset discovery, threat detection, and risk analysis. Blackpoint Cyber attack surface management includes an asset inventory of devices, identities, users, and applications in a unified view. Blackpoint Cyber attack surface management extends visibility into cloud platforms to reveal misconfigurations, policy drift, insecure access policies, and over-privileged users, all monitored in real time.^[2][5]

Blackpoint Cyber attack surface management continuously monitors assets and alerts on suspicious behavior, enabling Blackpoint’s 24/7 SOC to detect emerging threats. Blackpoint Cyber integrations centralize threat detection, response, and monitoring in a unified platform. Blackpoint Cyber describes attack surface monitoring as continuously tracking assets and exposures for changes and emerging threats.^[5]

Blackpoint Cyber defines attack surface management as the continuous process of discovering, monitoring, and reducing every point where an attacker could gain access, across endpoint, cloud, identity, and network. Blackpoint Cyber describes cyber asset attack surface management, or CAASM, as unifying data from existing tools into a complete, continuously updated view of all assets and their risks.^[5]

Blackpoint Cyber states its mission as providing 24/7/365 managed detection and response to organizations of all sizes around the world. Blackpoint Cyber states that all full-time roles at Blackpoint include participation in one of its employee equity programs, with plan details varying by country of employment.^[1][2][3][5]

Blackpoint Cyber on the record

About Red Canary

Red Canary, now part of Zscaler, sells Managed Detection & Response (MDR), a service that taps in-house experts to detect, manage, respond to, and remediate threats at scale. Managed Detection & Response (MDR) adds 24/7 human-led, AI-powered support enriched with Zscaler context.

Zscaler says the attack surface keeps expanding across networks, endpoints, identities, cloud infrastructure, and now AI applications. Zscaler says security team sizes are stagnant or shrinking, forcing SOC teams to triage more alerts, work longer hours, and accept coverage gaps.^[1]

Managed Detection & Response (MDR) experts work with the Agentic SecOps platform, supported by agentic workflows and deep ZIA integration. Managed Detection & Response (MDR) enriches investigations with ZIA context and automatically enforces ZIA policies to contain threats faster.

AI agents enrich alerts with device context, user login history, and IP intelligence before triaging. AI agents filter out difficult-to-tune alerts with short natural language prompts. A 24/7 team of detection and response specialists validates threats and reduces noise. Managed Detection & Response (MDR) includes threat hunting across clouds, endpoints, and identities, with scoped findings that carry evidence and next steps.

For response, Managed Detection & Response (MDR) can automatically block URLs and IoCs via ZIA, isolate endpoints via EDR, and suspend users via the customer's IDP. Playbooks are no-code and customizable. Customers can choose team oversight to initiate specific response actions, or choose to automate. Managed Detection & Response (MDR) alerts can be sent to a SIEM, SOAR, or ITSM platform to align with existing workflows.

Zscaler MDR unifies data from AWS, GCP, Azure, and cloud security tools like Wiz to detect and stop cloud threats before impact. Customers can store MDR data or other raw data, including JSON and syslog messages that can be written to an S3 bucket, for any length of time they specify. Managed Detection & Response (MDR) provides high-fidelity detection of ransomware precursors and rapid containment and remediation of threats before impact. Zscaler combines AI and human expert analysis to analyze reported phishing emails.

Managed Detection & Response (MDR) lets customers learn how their threat posture compares to similar organizations across industry, employee count, and the entire MDR customer base.

Red Canary on the record

Sources

Blackpoint Cyber full record

[1]Blackpoint cyber unveils new identity threat ai soc agentBlackpoint Cyber · blackpointcyber.com · published July 8, 2026 · Tier A
[2]blackpointcyber.comBlackpoint Cyber · blackpointcyber.com · undated page, accessed November 2, 2026 · Tier A
[3]Careers - Blackpoint CyberBlackpoint Cyber · undated page, accessed November 10, 2026 · Tier A
[4]Managed Detection and Response (MDR) Platform - Blackpoint CyberBlackpoint Cyber · undated page, accessed November 10, 2026 · Tier A
[5]Attack Surface Management Solutions - Blackpoint CyberBlackpoint Cyber · undated page, accessed November 10, 2026 · Tier A
[6]Blackpoint Cyber Reviews 2026: Details, Pricing, & FeaturesG2 · undated page, accessed November 10, 2026 · Tier C

Red Canary full record

[1]redcanary.comRed Canary · redcanary.com · undated page, accessed September 27, 2026 · Tier A
[2]Zscaler completes acquisition red canary accelerate innovations agentic ai driven securityZscaler · zscaler.com · published August 1, 2025 · Tier A
[3]Zscaler Managed Detection & Response (MDR) | ZscalerZscaler · undated page, accessed October 27, 2026 · Tier A
[4]Zscaler Sec Ops Pricing - G2G2 · undated page, accessed October 27, 2026 · Tier C

Spot a factual error? Request a correction.