Red Canary (a Zscaler company) vs Secureworks (a Sophos company)
Red Canary (a Zscaler company)
Red Canary delivers managed detection and response built on detection engineering rigor and broad telemetry ingestion (Microsoft Defender, CrowdStrike, SentinelOne, Palo Alto, Zscaler, AWS, Google Cloud, 200+ tools). It is widely regarded as a reference partner for organisations standardising on Microsoft Defender for Endpoint and Sentinel. Zscaler closed the $692M acquisition on August 1, 2025; Red Canary operates as a separate business unit within Zscaler.
Pros
- Reputation as one of the strongest MDR partners for Microsoft-centric security stacks
- Industry-recognised detection engineering and public threat research (annual Threat Detection Report)
- Vendor-broad integrations — does not require ripping out incumbent EDR
- Strong public research output keeps customer detections current
Cons
- Future roadmap will be shaped by Zscaler's strategy; long-term independence uncertain
- Premium positioning; not the cheapest option in mid-market deals
- Limited public pricing
Pricing: Custom (contact sales)
Secureworks (a Sophos company)
Secureworks pioneered the modern MSSP model and was majority-owned by Dell before its acquisition by Sophos in an $859M deal that closed February 2025. The Taegis platform (MDR, XDR, NDR, VDR, embedded SIEM) continues as a standalone, vendor-open product line within Sophos with native Sophos Endpoint integration. The Counter Threat Unit (CTU) remains a key differentiator.
Pros
- Counter Threat Unit is one of the longest-running in-house threat research teams
- Taegis remains vendor-open / BYO-EDR even post-Sophos
- Embedded SIEM removes the need for a separate Splunk-class deployment for many customers
- Deep history with regulated industries and global SOC footprint
Cons
- Ongoing integration risk following the Sophos acquisition
- Heritage SIEM/MSSP roots can mean a heavier deployment than newer cloud-native MDRs
- Limited public list pricing
Pricing: Custom (contact sales)