# Red Canary

**Canonical:** https://apis.io/providers/red-canary/  
**Website:** https://redcanary.com/  
**APIs profiled:** 1

Red Canary is a Managed Detection and Response (MDR) provider that monitors endpoint, identity, cloud, email and network telemetry on behalf of its customers, confirms threats with a 24x7 human and AI detection engineering team, and drives containment through automation playbooks and response actions across partner platforms such as Microsoft Defender, CrowdStrike Falcon, SentinelOne, Palo Alto Cortex, Carbon Black and Zscaler. The company also publishes widely used open-source security research including Atomic Red Team, Chain Reactor, Surveyor and the annual Threat Detection Report. Red Canary was acquired by Zscaler in 2025. It operates a tenant-scoped REST API (openapi/v3) over detections, threats, events, endpoints, endpoint users, identities, investigations and audit logs, authenticated with a per-user X-Api-Key token; the Swagger/OpenAPI reference for that API is served inside the customer portal and is not reachable without a tenant subdomain and login.

## Kin Score — 40.4 / 100 (thin)

Scored 2026-08-17 under rubric 0.11.0. Trend: flat (+0.0 from 40.4).

| Facet | Score |
|---|---|
| Discoverability | 87.0 |
| Contract Quality | 0.0 |
| Governance | 12.5 |
| Operational Transparency | 55.3 |
| Developer Ergonomics | 65.2 |
| Commercial Clarity | 50.0 |

## Agent readiness — 16.2 (agent-aware)

| Dimension | Value |
|---|---|
| Spec Presence | no |
| Agentic Access | no |
| MCP Server | no |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | documented |
| OpenAPI Examples | no |
| Rate Limit Signal | no |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | yes |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## APIs (1)

- **Red Canary REST API v3** — Tenant-scoped REST API over the Red Canary portal. Documented resources include detections, threats, events, endpoints, endpoint_users, identities, investigations and audit_logs...

## Security (4)

- **Red Canary Authentication** — apiKey · 1 scheme
- **Red Canary Domain Security** — TLSv1.3 · HSTS · DMARC
- **Red Canary Vulnerability Disclosure** — security.txt · contact published
- **Red Canary Trust Center** — SOC 2 Type II, ISO 27001:2013, ISO 27701, JOSCAR, EU-U.S. Data Privacy Framework, UK Extension to the EU-U.S. Data Privacy Framework, Swiss-U.S. Data Privacy Framework

## Tags

Company, Security, Cybersecurity, Managed Detection and Response, Threat Detection, Threat Intelligence, Endpoint Security, Incident Response, Security Operations, Automation

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/red-canary/). Scores are computed from the provider's own public artifacts under a published rubric.