Red Canary Outage History

Red Canary experienced delayed threat detection for Government CrowdStrike customers due to an incident with CrowdStrike's Falcon Data Replicator. The issue affected the Detections and CrowdStrike Falcon components for 38 minutes. The incident was resolved after CrowdStrike addressed the underlying Falcon Data Replicator problem.

Red Canary experienced an issue with AWS ingestors that caused delays in processing CloudTrail and GuardDuty alerts for 7.1 hours. The problem was identified and a fix was implemented to restore normal alert processing functionality.

Red Canary's SSO certificate was set to expire, requiring customers using Red Canary as an Identity Provider or third-party IdPs with certificate validation to rotate their SSO certificates to prevent login failures. The issue affected the Web Portal for SSO users, while non-SSO customers remained unaffected. The incident was resolved after customers completed the necessary certificate rotation process over a 9-day period.

Red Canary experienced intermittent delays in their detection system for 2.5 hours. The issue was identified and a fix was implemented, with monitoring confirming the system returned to normal operations. The incident affected the Detections component and has been fully resolved.

Red Canary experienced delayed telemetry for Google Cloud Platform data due to underlying AWS Cloud Platform issues, affecting their Web Portal, APIs, and systems like Canary Exporter. The incident caused delays in telemetry, events, and detections for GCP-related data across their platform. The issue was resolved after 4.1 hours once the underlying AWS problems were addressed.