What do Red Canary and Threat Intelligence sell?

Red Canary sells Managed Detection & Response (MDR). Threat Intelligence sells Evolve Security Automation, EvolvePT, EvolveAST, EvolveIR, Penetration Testing Services and 2 more.

Are Red Canary and Threat Intelligence in the same category?

They share MDR and managed SOC. Red Canary's primary category is MDR and managed SOC and Threat Intelligence's is Breach simulation and automated pen-testing.

Who owns Red Canary and Threat Intelligence?

Red Canary is owned by Zscaler, since 2025.

Who are Red Canary and Threat Intelligence sold to?

From its own pages, Red Canary sells mainly to security operations teams that need to scale protection without adding headcount.

Vendor comparison · 2 companies

Red Canary vs Threat Intelligence

Red Canary, now part of Zscaler, sells Managed Detection & Response (MDR), a service that taps in-house experts to detect, manage, respond to, and remediate threats at scale. Threat Intelligence delivers cyber security products and services. CISO Tribune files both under MDR and managed SOC. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

Red Canary
Threat Intelligence

Add a company

Red Canary vs Threat Intelligence: Products, Customers and Funding Compared
What it sells
	Red CanaryRed Canary, now part of Zscaler, sells Managed Detection & Response (MDR), a service that taps in-house experts to detect, manage, respond to, and remediate threats at scale.redcanary.com	Threat IntelligenceThreat Intelligence delivers cyber security products and services.threatintelligence.com
What it sells	Managed Detection & Response (MDR)^[3]Taps in-house experts to detect, manage, respond to, and remediate threats at scale.	Evolve Security Automation^[1][11][12]Evolve built-in security capabilities automatically detect, prioritize, and remediate threats. EvolvePT^[5][6]EvolvePT is an automated pen testing solution. EvolveAST^[7]EvolveAST helps organizations orchestrate and automate application security testing in DevOps pipelines. EvolveIR^[8]EvolveIR is an automated incident response tool. Penetration Testing Services^[6][9]Penetration Testing Services proactively identify the most exploitable security vulnerabilities of infrastructure. Governance, Risk and Compliance Services^[9]Assessments and consulting services to help identify risk levels and compliance requirements. EvolveMDR^[11]EvolveMDR combines security specialists with Evolve Security Automation capabilities to streamline security operations.
Categories
Categories	MDR and managed SOC (primary category) Threat intelligence	Breach simulation and automated pen-testing (primary category) Incident response and forensics MDR and managed SOC Digital risk protection
Headquarters
Headquarters	Not stated on its pages	Not stated on its pages
Founded
Founded	Not stated on its pages	Not stated on its pages
Ownership and funding
Ownership and funding	Owned by Zscaler since 2025^[2][3][4]	Not stated on its pages
Named customers
Named customers	Not stated on its pages	Not stated on its pages
Recent news
Recent news	Not stated on its pages	Not stated on its pages
G2 and Gartner Peer Insights
G2 and Gartner Peer Insights	G2: listed, seen October 27, 2026^[4] Gartner Peer Insights: Not stated on its pages	G2: listed, seen November 11, 2026^[13] Gartner Peer Insights: Not stated on its pages
Who it fits
Who it fits	From its own pages, Red Canary sells mainly to security operations teams that need to scale protection without adding headcount. Its service is aimed at organizations whose attack surface spans networks, endpoints, identities, cloud infrastructure, and AI applications. Organizations that run AWS, GCP, or Azure environments are covered by its cloud detection. Teams that use a SIEM, SOAR, or ITSM platform can send alerts into those workflows.	Not written yet
Last verified
Last verified	September 27, 2026	November 6, 2026

Where they overlap

Red Canary and Threat Intelligence are both filed under MDR and managed SOC.

Where they differ, field by field

Red Canary's primary category is MDR and managed SOC; Threat Intelligence's is Breach simulation and automated pen-testing.
Red Canary is also filed under Threat intelligence. Threat Intelligence is also filed under Incident response and forensics and Digital risk protection.
Red Canary lists Managed Detection & Response (MDR). Threat Intelligence lists Evolve Security Automation, EvolvePT, EvolveAST, EvolveIR, Penetration Testing Services and 2 more.
Red Canary is owned by Zscaler, since 2025.

What it sells: Red Canary

What Managed Detection & Response (MDR) does^[3]: Managed Detection & Response (MDR) uses in-house experts, AI agents, and deep ZIA integration. Alerts can be sent to a SIEM, SOAR, or ITSM platform.

What it sells: Threat Intelligence

What Evolve Security Automation does^[1][11][12]: Evolve automatically generates pre-configured Evolve Virtual Appliances for deployment into corporate networks and on-premise data centers. Evolve Virtual Appliances support VMware or Hyper-V, and third-party cloud providers including AWS and Azure. Evolve maps major security standards and frameworks to ensure the right security controls are in place.
What EvolvePT does^[5][6]: Threat Intelligence combines its penetration testing tool, EvolvePT, with a certified, principal-only team of penetration testing consultants. Symbion turned to EvolvePT, an automated pen testing solution.
What EvolveAST does^[7]: EvolveAST helps organizations orchestrate and automate the integration of application security testing into DevOps pipelines. Evolve integrates automated application security testing into the standard business as usual processes and technologies of development teams.
What EvolveIR does^[8]: EvolveIR is an automated incident response tool that can detect and respond to security threats. Threat Intelligence offers an incident response solution that uses its security team and EvolveIR.
What Penetration Testing Services does^[6][9]: Threat Intelligence uses a Purple Team method in which its Principal Consultants collaborate with the internal security team of the customer. Threat Intelligence evaluates web and mobile applications in five phases: reconnaissance, scanning, vulnerability assessment, exploitation, and reporting. Penetration Testers at Threat Intelligence hold qualifications like CEH, OSCP, or GPEN.
What Governance, Risk and Compliance Services does^[9]: In its IRAP assessments, Threat Intelligence guides customers through Information Security Registered Assessors Program (IRAP) compliance. Threat Intelligence provides guidance on securing ISO 27001 certification for an Information Security Management System (ISMS).
What EvolveMDR does^[11]: Threat Intelligence specialists help customers mitigate threats and create a detection and prevention program. Threat Intelligence describes security and IT teams with limited skills and resources as facing challenges in managing risks and meeting compliance requirements.

Questions about Red Canary and Threat Intelligence

What do Red Canary and Threat Intelligence sell?: Red Canary sells Managed Detection & Response (MDR). Threat Intelligence sells Evolve Security Automation, EvolvePT, EvolveAST, EvolveIR, Penetration Testing Services and 2 more.
Are Red Canary and Threat Intelligence in the same category?: They share MDR and managed SOC. Red Canary's primary category is MDR and managed SOC and Threat Intelligence's is Breach simulation and automated pen-testing.
Who owns Red Canary and Threat Intelligence?: Red Canary is owned by Zscaler, since 2025.
Who are Red Canary and Threat Intelligence sold to?: From its own pages, Red Canary sells mainly to security operations teams that need to scale protection without adding headcount.

About Red Canary

Red Canary, now part of Zscaler, sells Managed Detection & Response (MDR), a service that taps in-house experts to detect, manage, respond to, and remediate threats at scale. Managed Detection & Response (MDR) adds 24/7 human-led, AI-powered support enriched with Zscaler context.

Zscaler says the attack surface keeps expanding across networks, endpoints, identities, cloud infrastructure, and now AI applications. Zscaler says security team sizes are stagnant or shrinking, forcing SOC teams to triage more alerts, work longer hours, and accept coverage gaps.^[1]

Managed Detection & Response (MDR) experts work with the Agentic SecOps platform, supported by agentic workflows and deep ZIA integration. Managed Detection & Response (MDR) enriches investigations with ZIA context and automatically enforces ZIA policies to contain threats faster.

AI agents enrich alerts with device context, user login history, and IP intelligence before triaging. AI agents filter out difficult-to-tune alerts with short natural language prompts. A 24/7 team of detection and response specialists validates threats and reduces noise. Managed Detection & Response (MDR) includes threat hunting across clouds, endpoints, and identities, with scoped findings that carry evidence and next steps.

For response, Managed Detection & Response (MDR) can automatically block URLs and IoCs via ZIA, isolate endpoints via EDR, and suspend users via the customer's IDP. Playbooks are no-code and customizable. Customers can choose team oversight to initiate specific response actions, or choose to automate. Managed Detection & Response (MDR) alerts can be sent to a SIEM, SOAR, or ITSM platform to align with existing workflows.

Zscaler MDR unifies data from AWS, GCP, Azure, and cloud security tools like Wiz to detect and stop cloud threats before impact. Customers can store MDR data or other raw data, including JSON and syslog messages that can be written to an S3 bucket, for any length of time they specify. Managed Detection & Response (MDR) provides high-fidelity detection of ransomware precursors and rapid containment and remediation of threats before impact. Zscaler combines AI and human expert analysis to analyze reported phishing emails.

Managed Detection & Response (MDR) lets customers learn how their threat posture compares to similar organizations across industry, employee count, and the entire MDR customer base.

Red Canary on the record

About Threat Intelligence

Threat Intelligence delivers cyber security products and services. Threat Intelligence services combine cyber security consultants with security automation. Evolve is a Security Automation Cloud designed and operated by the Threat Intelligence team. Evolve built-in security capabilities automatically detect, prioritize, and remediate threats.^[1][2][3][4]

Evolve provides solutions for large enterprises and medium-sized businesses. Evolve maps major security standards and frameworks to ensure the right security controls are in place. Evolve automatically generates pre-configured Evolve Virtual Appliances for deployment into corporate networks and on-premise data centers. Evolve Virtual Appliances support VMware or Hyper-V, and third-party cloud providers including AWS and Azure.^[4]

Symbion, a national wholesaler of healthcare services and products, needed to evaluate its current security posture and identify major security gaps. Symbion turned to EvolvePT, an automated pen testing solution. Threat Intelligence combines its penetration testing tool, EvolvePT, with a certified, principal-only team of penetration testing consultants. EvolveAST helps organizations orchestrate and automate the integration of application security testing into DevOps pipelines. EvolveIR is an automated incident response tool that can detect and respond to security threats. EvolveDW monitors domains and keywords on the dark web and alerts the customer team when data leaks or threats are detected.^{[1][4][5][6][7][9]}

Threat Intelligence uses a Purple Team method in which its Principal Consultants collaborate with the internal security team of the customer. Threat Intelligence evaluates web and mobile applications in five phases: reconnaissance, scanning, vulnerability assessment, exploitation, and reporting. Penetration Testers at Threat Intelligence hold qualifications like CEH, OSCP, or GPEN.^[6]

Threat Intelligence incident response services provide containment, digital forensic investigation, and remediation assistance. Threat Intelligence offers a 30-day monitoring option after containment to prevent threats from resurfacing. Threat Intelligence offers Board Tabletop Exercises. The Threat Intelligence specialist team manages major security breach investigations and ransom and extortion campaigns every month for local and global organisations. Threat Intelligence has provided support during significant data breaches, including the Medibank 2022 and the Latitude 2023 incidents.

In its IRAP assessments, Threat Intelligence guides customers through Information Security Registered Assessors Program (IRAP) compliance. Threat Intelligence provides guidance on securing ISO 27001 certification for an Information Security Management System (ISMS). The services also cover HIPAA, described as a regulation for securing Personal Health Information in healthcare. The services also cover NIST, described as controls for critical infrastructure operators to manage cybersecurity risk.^[9][10]

EvolveMDR combines security specialists with Evolve Security Automation capabilities to streamline security operations. Threat Intelligence has cybersecurity experts in Sydney. Threat Intelligence professional services are delivered by CREST certified cyber security consultants. GT Law is an independent Australian law firm. GT Law turned to Evolve Security Automation. Threat Intelligence contributes to the development of global security methodologies, standards, and libraries that are incorporated into industry-specific security regulations of the Open Web Application Security Project (OWASP).^{[1][4][7][9][11][12]}

Threat Intelligence on the record

Sources

Red Canary full record

[1]redcanary.comRed Canary · redcanary.com · undated page, accessed September 27, 2026 · Tier A
[2]Zscaler completes acquisition red canary accelerate innovations agentic ai driven securityZscaler · zscaler.com · published August 1, 2025 · Tier A
[3]Zscaler Managed Detection & Response (MDR) | ZscalerZscaler · undated page, accessed October 27, 2026 · Tier A
[4]Zscaler Sec Ops Pricing - G2G2 · undated page, accessed October 27, 2026 · Tier C

Threat Intelligence full record

[1]threatintelligence.comThreat Intelligence · threatintelligence.com · undated page, accessed November 6, 2026 · Tier A
[2]We are Threat IntelligenceThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
[3]Cybersecurity Solutions| Pentesting | IR | MSSP | AUSThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
[4]Evolve Cybersecurity PlatformThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
[5]Automated Penetration Testing Case Study | EvolvePTThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
[6]Penetration Testing Services | Red Team | AustraliaThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
[7]EvolveAST Application Security TestingThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
[8]Incident Response and Digital Forensic InvestigationsThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
[9]Cyber Security Professional ServicesThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
[10]Governance, Risk and Compliance ServicesThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
[11]Managed Security Services AustraliaThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
[12]Security Automation Case Study - Evolve and GTLawThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
[13]SOCRadar Extended Threat Intelligence Reviews 2026G2 · undated page, accessed November 11, 2026 · Tier C

Spot a factual error? Request a correction.