Side-by-side from public catalog data. 3 vendors.
These vendors overlap in only Security Orchestration, Automation & Response (SOAR) — the product rows below reflect that; you may be comparing vendors for different needs.
| Dimension | ORNA Inc. | CatchProbe | Red Canary |
|---|---|---|---|
| Independently verifiedHas anyone other than the vendor confirmed this? | Limitedchecked 3 of 4 | Limitedchecked 3 of 4 | Limitedchecked 3 of 4 |
| Operating durabilityIs this a real, durable business? | Strongchecked 3 of 4 | Limitedchecked 3 of 4 | Strongchecked 3 of 4 |
| Behaviour under stressWhat do they do when something goes wrong? | Limitedchecked 2 of 3 | Limitedchecked 2 of 3 | Limited |
| Attribute | ORNA Inc. | CatchProbe | Red Canary |
|---|---|---|---|
| Website | orna.app ↗ | catchprobe.com ↗ | redcanary.com ↗ |
| Status | Unclaimed | Unclaimed | Unclaimed |
| Categories | Security Orchestration, Automation & Response (SOAR), Cyber Range Training, Incident Response | Security Orchestration, Automation & Response (SOAR), Threat Intelligence, Digital Risk Protection (DRP), Password Management, Incident Response, Honeypots & Deception | Security Orchestration, Automation & Response (SOAR), Managed Detection & Response (MDR), Cyber Range Training |
| Total products | 3 | 7 | 9 |
| Public materials (datasheets, whitepapers, case studies) | None found | None found | 57 found → |
| Certifications (compliance claims, keyword-matched) | None found | None found | CSA STAR, GDPR compliant, HIPAA, ISO 27001, ISO 27017, ISO 27018, PCI DSS, SOC 2 Type II |
| Security headers (vendor's own website) | 2/5 |
| Disclosure postureDo they tell you the awkward things unprompted? | Limitedchecked 3 of 3 | Limitedchecked 3 of 3 | Limitedchecked 3 of 3 |
|---|
| MomentumAre they still shipping, or coasting? | Mixedchecked 2 of 2 | Limitedchecked 1 of 2 | Limitedchecked 2 of 2 |
|---|
| 3/5 |
| Publishes pricing (vs. “contact us”-only) | No | No | No |
|---|
| Publishes a status page | No | No | Yes → |
|---|
| GitHub org (open-source presence) | Yes → | No | No |
|---|
| Domain registered (RDAP, registry record) | 2021 → | 2018 → | 1998 → |
|---|
| DNSSEC (their own domain) | No | No | No |
|---|
| CAA (restricts which CAs can issue certs) | No | No | No |
|---|
| Trust center (live compliance portal) | No | No | Yes → |
|---|
| HSTS preloaded (HTTPS enforced from the first connection) | Yes → | No | No |
|---|
| Strengths (neutral, vendor-sourced) | — | — | Managed Detection & Response (MDR): Detection-engineering depth and high-fidelity detections across endpoint, cloud, and identity, with transparency into the detection logic. |
|---|---|---|---|
| Gaps / watch-outs | — | — | Managed Detection & Response (MDR): Detection-and-response focus; full managed-firewall/concierge breadth is less central than detection quality. |
| Security Orchestration, Automation & Response (SOAR) |
| Cyber Range Training | — |
| Digital Risk Protection (DRP) | — | — |
| Email Security | — | — |
| Honeypots & Deception | — | — |
| Incident Response | — |
| Managed Detection & Response (MDR) | — | — |
| Password Management | — | — |
| Threat Intelligence | — |