

Elastic Security and Huntress Managed ITDR are key players in the cybersecurity domain, each offering distinct advantages. Elastic Security shows an upper hand in cost efficiency and community engagement, thanks to its open-source foundation. Huntress, while offering robust features, is less adaptable compared to Elastic Security's flexible pricing and strong community support.
Features: Elastic Security offers a range of advanced features like machine learning, fast indexing, and robust community resources, excelling in open-source customization and log management. Huntress Managed ITDR focuses on consistent threat detection with Microsoft integration, real-time incident management, and cloud protection, featuring automatic alerting and remediation to streamline threat responses.
Room for Improvement: Elastic Security needs to improve documentation, authentication systems, and dashboard creation, while simplifying setup for users without vendor assistance. Huntress Managed ITDR requires better integration with non-Microsoft environments, a reduction in false positives, and a more streamlined user experience on the dashboard.
Ease of Deployment and Customer Service: Elastic Security provides flexibility across on-premises and hybrid cloud environments, which can complicate deployment and support for novices. Huntress Managed ITDR is optimized for public cloud infrastructure, ensuring faster deployment and focused cloud-based customer support.
Pricing and ROI: Elastic Security, leveraging its open-source nature, offers cost-effective solutions ideal for smaller enterprises, backed by community support that appeals to startups and SMEs. Huntress Managed ITDR, priced slightly higher, reflects the strength of its features and customer support, offering a comprehensive security solution without overspending.
It does not require hefty security budgets and can be deployed for enterprise security effectively.
I really value how Huntress does most of the heavy lifting and monitoring for the identities.
You will not be able to beat Huntress Managed ITDR on pricing, and that is considering the capabilities Huntress Managed ITDR provides at their price level.
In terms of a return on investment for our security posture, it's absolutely paying for itself to ensure that we are better secure compared to what we were without it.
Support is prompt and helpful.
Most of the time when my team encounters issues, they receive responses within 24 hours.
I have not faced any difficulties with Elastic Security, as we have a pretty good support service from them.
They are quick to respond and help us explain why Huntress marked an identity in a certain way.
They primarily handle ITDR communications through chat, they made an exception and provided a call for a critical situation to walk me through the remediation process.
They've been very responsive when we have had to use them.
It allows us to think about specific use cases, such as gathering malicious IPs in a single view and analyzing threats based on geolocation.
Elastic Security is quite scalable.
I've never had limitations on scaling or performance issues.
Huntress Managed ITDR is protecting about 120 users. In terms of the people that log into it, it's two or three IT admins, but we've got 120 licenses, so it's protecting 120 Microsoft accounts.
Whether there are ten users or three hundred, it attaches to the Microsoft tenant, making it effortless to scale.
In terms of stability, I would rate Elastic a solid eight out of ten.
I would rate the stability of Huntress Managed ITDR as a ten, as I have not really experienced any downtime, bugs, or glitches.
In terms of stability, the solution is very stable, and the cloud platform itself is reliable.
Once it is deployed, it updates automatically and takes care of itself.
CrowdStrike and Defender have more established threat intelligence integration due to having a larger client base.
My security testing team continuously reports vulnerabilities, and we have to fix and update the versions frequently.
Machine learning algorithms become better with time; as they ingest a huge volume of data, they become better.
There's a confusing aspect with the escalation options; applying conditions to a specific identity is not immediately visible and requires using a three-dot menu.
It's a very simple and easy-to-use interface in terms of recommendations and feedback.
I still see many issues indicating that devices are not compliant due to policy conflicts, and it has been almost a month trying to figure out how to make all devices compliant.
The pricing is reasonable, especially for Small Medium Enterprises (SMEs), making it a viable option for businesses building their security infrastructure.
This is beneficial for SMEs as they do not need extensive budgets for security solutions.
Elastic Security is considered cost-effective, especially at lower EPS levels.
Compared to other companies, Huntress keeps costs reasonable, offering 24/7 vigilance without price gouging.
I think it was two or three dollars a user a month.
The licensing cost, again, is a good price point that allows me to add it on to clients and it becomes a no-brainer for them to add it because the price of the service makes sense.
Elastic Security offers good insight regarding alerts, reports, and cases.
Elastic Security offers advanced features such as machine learning and integration with ChatGPT.
We require rapid processing speed for alerts and event data, and Elastic Security is very efficient at handling this level of data.
It provides protection against M365 identity compromises, like admin account breaches.
The best features of the solution are the fact that there are real people behind it who watch the alerts and then escalate as required, and the fact that there is an immediate support team or SOC team behind it if we have any questions.
The best feature is the lack of false positives; when we receive an alert from Huntress Managed ITDR, the majority of the time they are true positives that are actionable, unlike some other tools which generate a lot of noise.
| Product | Mindshare (%) |
|---|---|
| Elastic Security | 3.0% |
| Wazuh | 7.5% |
| Splunk Enterprise Security | 6.8% |
| Other | 82.7% |
| Product | Mindshare (%) |
|---|---|
| Huntress Managed ITDR | 6.7% |
| CrowdStrike Falcon | 14.0% |
| Microsoft Defender for Identity | 11.4% |
| Other | 67.9% |


| Company Size | Count |
|---|---|
| Small Business | 40 |
| Midsize Enterprise | 11 |
| Large Enterprise | 15 |
| Company Size | Count |
|---|---|
| Small Business | 13 |
| Midsize Enterprise | 2 |
Elastic Security combines the features of a security information and event management (SIEM) system with endpoint protection, allowing organizations to detect, investigate, and respond to threats in real time. This unified approach helps reduce complexity and improve the efficiency of security operations.
Additional offerings and benefits:
Finally, Elastic Security benefits from a global community of users who contribute to its threat intelligence, helping to enhance its detection capabilities. This collaborative approach ensures that the solution remains on the cutting edge of cybersecurity, with up-to-date information on the latest threats and vulnerabilities.
Huntress Managed ITDR specializes in protecting Microsoft 365 environments by analyzing abnormal logons, run events, and unsanctioned VPNs. It offers efficient deployment, direct SOC support, and seamless integration with Microsoft Defender, enhancing security strategies against identity compromises.
Huntress Managed ITDR provides a robust platform for centralized management of Microsoft environments. It emphasizes fast deployment and automatic remediation to protect against threats such as admin account breaches. With direct SOC support, it offers actionable insights and reports that bolster security measures. Though improvements are needed in areas like reporting and interface responsiveness, it remains a cost-effective choice for those integrating with Microsoft Defender for Endpoint, helping organizations guard against abnormal logins and vulnerabilities.
What are the key features of Huntress Managed ITDR?Huntress Managed ITDR is employed across multiple industries to integrate clients with Microsoft 365 and secure their endpoints and cloud tenants. They use the platform for monitoring activity and preventing unauthorized access. Managed Service Providers utilize it for its robust threat detection and sign-in awareness, connecting devices to handle incidents efficiently.
We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.