Huntress Managed EDR Reviews

We're a managed service provider, so we resell Huntress Managed EDR to our customers. We use the EDR and the MDR products, which provide endpoint and 365 protection.

Huntress Managed EDR is remarkably user-friendly. It excels at identifying threats and provides transparent, actionable information about the following steps to take when a threat is detected.

We use Huntress in both the SMB and enterprise markets. I don't differentiate between them, as it works great for both.

We saw the benefits of Huntress Managed EDR immediately.

The Huntress team's consistent monitoring is excellent for triaging and managing alerts, which benefits our workloads. They are also a great team to work with.

Huntress's ability to automatically remediate low-severity threats helps reduce our workload.

The way Huntress's SOC team collaborates with us is significantly better than other solutions.

There are a few key aspects of Huntress that we appreciate. What stands out most is their human element: when faced with an unknown threat, real people, not just automated processes, are investigating it, and they're people we trust. Their security team is excellent; they proactively contacted vulnerable partners during the Exchange vulnerability a couple of years ago, urging them to apply fixes. They also adapt to customer needs, continuously developing new products and features, such as their upcoming SIEM product, and expanding upon their existing platform. Ultimately, while their software and product are great, what we value most is their company culture - they are incredibly easy to work with.

Huntress has a cyber education platform, but it lacks all the languages we need. Since we support customers in different countries, expanding the language options for their training would be beneficial.

I have been using Huntress Managed EDR for approximately four to five years.

Huntress Managed EDR is stable. We have not experienced any issues with lagging, crashing, or downtime.

We have never encountered any issues with Huntress being scalable.

Our team on the security side has contacted Huntress support, and they have been pleased.

We used SentinelOne before switching to Huntress. The main reasons for switching were the lower cost and that Huntress is fully managed.

The initial setup of Huntress Managed EDR was easy.

The deployment typically requires only one person.

Huntress has a favourable pricing structure, and I appreciate the cost-effectiveness compared to previous solutions.

I rate Huntress Managed EDR a ten out of ten.

We use other security products in conjunction with Huntress Managed EDR.

Occasional maintenance is required for agents that lose connection and to manage unidentified threats.

Huntress is one of our favourite products. It's easy to deploy for new users; they simply push out the agent. The ability to filter low-severity threats and automate their remediation can save valuable time.

We are using it as an MDR, EDR, antivirus product. We are also utilizing their Microsoft 365 ITDR, which is the new name, and their security awareness training platform. The only product they offer that we do not use currently is their SIM tool. It is on our radar and our roadmap, but we are not using it.

Their SOC is super responsive and does a great job of catching incidences and being on top of any issues that arise. They have an automated remediation tool that works well for both ITDR and EDR. It allows approval of remediations, performs all the necessary steps, verifies them, and resolves issues efficiently.

The ITDR product is coming along great, however, we are still getting many false positives. A lot of user accounts get locked out over nonissues, and while they are easy to resolve, someone still needs to take action. It is time spent by a technician.

I have been using it for a little over two and a half years, coming up on three years.

I have never had a problem that was Huntress's fault.

It is pretty scalable. I am currently running a little over twenty-five hundred endpoints without any problems or concerns about managing that number of computers.

If I contact support, it is almost immediate. They respond quickly and work with me until the problem is fully resolved. They are thorough and ensure the problem is addressed without pushing responsibilities onto me unnecessarily.

Neutral

Previously, we used SentinelOne, Webroot, and BlackPoint. I switched since I have tested SentinelOne multiple times and could bypass it. BlackPoint generates many false positives, taking more time to manage than Huntress.

The initial setup process was smooth. We were provided with an engineer who wrote a script based on our current structure and remote management software. This script allowed easy deployment, and Huntress's support ensured everything went smoothly.

We were given an engineer who sat down with us, understood our current setup, wrote a script for deployment, and did all the backend work necessary for a smooth deployment.

The pricing is piecemeal, per agent on EDR, MDR, and per user on ITDR. It can get expensive for small to medium businesses if large license quantities are not purchased. However, given Huntress's success rate, I am willing to pay for a product that performs well.

The alternatives I have used include SentinelOne, Webroot, and BlackPoint.

I rate Huntress an eight out of ten. I prefer using it over other security tools because it has been reliable and efficient in catching incidents and isolating threats quickly.

I have been using Huntress Managed EDR for approximately one year. I primarily use Huntress Managed EDR for threat detection and response, including continuous monitoring of endpoints for malicious activity, detection of malware and ransomware, identification of persistent machines, and receiving 24/7 managed threat hunting from Huntress security analysts that help me quickly investigate suspicious behavior and provide clear remediation.

One full example I can share is when Huntress detected suspicious persistence activity on an endpoint and identified an unusual scheduled task that had been created and flagged it for investigation. The Huntress team provided context about why the activity was suspicious along with clear remediation steps that made it much easier for my team to validate the alert, remove the persistent mechanism, and ensure the endpoint was clean. Having both the analyst's guidance helped me respond much faster than if I had investigated entirely on my own.

Huntress has become my daily monitoring workflow. I review the Huntress alerts, investigate suspicious activity, and follow the remediation guidance whenever needed. It complements my existing security tools and helps me detect and respond to endpoint threats more efficiently.

I believe Huntress takes a balanced approach by combining AI with human analyst validation that improves detection quality while reducing false positives. It provides greater confidence in alerts compared to relying solely on AI.

Based on my experience, Huntress Managed EDR's AI capabilities are accurate and reliable in identifying suspicious behavior, helping me prioritize potential threats. What I appreciate is that Huntress does not rely solely on AI detection and has security analysts review and validate alerts before being escalated. This combination improves the quality of alerts and reduces false positives, giving me greater confidence in the results. Overall, I find the output consistent and dependable for day-to-day security operations.

The best features Huntress Managed EDR offers include managed threat detection, analyst-validated alerts, behavior detection, ransomware protection, persistent detection, and clear remediation guidance. Together, it helps me detect and respond to threats while reducing false positives. I would say the managed detection analyst support is the standout feature for me, as having a security expert review suspicious activity and provide clear remediation steps gives me confidence that I am focusing on genuine threats rather than spending time investigating unnecessary alerts.

The analyst validation has most improved my work efficiency. Instead of investigating every alert from scratch, I receive alerts that have already been reviewed by Huntress security analysts who provide context on why the activity is suspicious, assess its potential impact, and give recommendations and remediation steps. This helps me identify genuine threats and reduce the time spent on false positives. My team can then focus on higher priority security tasks. Overall, it has improved my incident response process and increased my confidence when responding to security events.

Huntress Managed EDR has added value to my security stack. The combination of managed threat detection analysts, validated alerts, behavior detection, and clear remediation guidance helps me improve my security operations and incident response. Overall, I have a positive experience with the platform.

Huntress Managed EDR has positively impacted my organization by improving visibility of endpoint threats and strengthening my incident process. Since the implementation, I have been able to detect suspicious activity more quickly, prioritize real threats through analyst-validated alerts, and reduce the time spent investigating false positives. The platform's recommendations and guidance also help my team respond to incidents more effectively. Overall, it has improved my endpoint security, reduced alert fatigue, and increased confidence in my daily security operations.

I do not track specific metrics that I can share publicly, but I have identified operational improvements. My analysts spend less time investigating false positives because Huntress provides analyst-validated alerts and detailed context that help me prioritize genuine threats more quickly and improve my overall response time. I have also gained better visibility into endpoint activity and more confidence when responding to security incidents.

Overall, I will say it has been a reliable solution. I have not encountered any major issues. If I had to suggest an improvement, I would like to see a customizable dashboard and reporting along with additional integrations with third-party SIEM or SOAR platforms. More advanced policies to customize automation options would also be beneficial for larger enterprise environments. These have been discussed as announcements rather than major gaps. Overall, I have a positive experience with the platform.

I will say there is always room for improvement, such as a dashboard or enhancing reports. I will also say that there should be updates every day because I work in cybersecurity, and some things can crash or face zero-day vulnerabilities. Things can get messy, so I think adding something would be beneficial because of that.

I have been working in my current field for three or more years.

Huntress Managed EDR has been a stable and reliable solution. I have not experienced major stability issues, and it consistently performs well in my environment.

The scalability of the environment is straightforward, with adding endpoints and managing them from a centralized management console. It is easy to monitor and manage as the environment grows. From my experience, the platform handles operational needs without significant scalability issues.

I previously relied on traditional antivirus endpoints, and I switched to Huntress Managed EDR to gain stronger endpoint detection and response capabilities, manage threat hunting, and have analysts validate alerts, which improves visibility and response to advanced threats.

I do not have specific ROI metrics, but I have seen operational benefits such as faster investigations, reduced alert fatigue, and more efficient incident responses. I also believe I do not require too many people to work, which helps.

I was not personally involved in the evaluation, but my organization commonly compares Huntress Managed EDR with solutions such as Microsoft Defender, CrowdStrike, SentinelOne, and Sophos before making decisions. I cannot confirm if anyone else in my organization evaluated them.

I will say it is very easy to work with because it is very user-friendly. I would not call it basic; the overview is friendly for analysis and helps in observing any difficulties.

I will say it is a very good tool for the SMB market. I can have everything in one place, and it is easy to work with and track investigations through AI and also by human touch. Things have been under security pressure, and it will be good for organizations.

For example, I work in general shifts, so sometimes people are not there or are sick. In case any critical or crucial alerts come in, such as a zero-day or something ransomware-related, Huntress helps me identify those alerts, which is very beneficial for me.

It helps reduce low-severity alerts and SOC fatigue. It also enables me to conduct proper analyses efficiently. What I can say is that it is very good; I cannot say it in better words.

I do not require that because I believe L1s are initiated, and L2s are adequate to work. The SOC manager's workload is enough to manage it.

I cannot provide a proper example because it is related specifically to my organization, but the product is good for me and helps make my organization stronger from a defensive standpoint. It makes it worth having this tool.

Once I deployed Huntress, I started seeing benefits in the first few weeks. After onboarding the endpoints to the platform, I gained visibility in my environment and began receiving meaningful analyst validation of alerts, which provided better insight into endpoint activity. Overall, the following months saw noticeable improvements in my incident response process, making it more efficient and allowing me to prioritize genuine threats effectively.

I have not been directly involved in purchasing or licensing processes, so I cannot comment on exact pricing setups. However, from an operational perspective, the development and onboarding are straightforward. The license process seems to be managed by my IT and procurement teams. Based on my experience using the platform, I believe it provides good value because of its managed detection capabilities and analyst support.

I recommend using Huntress Managed EDR if you are looking for a managed endpoint detection and response solution. Ensure proper onboarding to take full advantage of analyst support and validated alerts and remediation guidance. It provides strong visibility into endpoints and threats and improves incident response. I would rate this product a nine out of ten.

We use it for our clients and ourselves. Huntress is a pretty comprehensive platform. Recently, they acquired the security awareness training platform, which helps us to fulfill our clients' needs regarding security. It has been pretty good. A lot of our clients are growing in this area. Traditionally, we have been using it for endpoint protection, which has been effective in many situations.

It is positioned very well for the SMB market. The most recent understanding that I have is that they are providing more visibility in the market. People are now seeing it as a product for security for many different reasons. The program is easy to use and easy for administrators as well. When it comes to security, it is similar to all the other players in town. Everybody says that they are an all-in-one sort of solution. From my perspective, Huntress is in the MSP space more than some of the bigger players such as CrowdStrike, and they are more successful because it is more MSP friendly. There is a lot of uptake on the growth of the product in general. CrowdStrike, for example, is a very mature product in the security marketplace, so they may or may not need to engage as closely as Huntress. Huntress also educates the group of people who use their product more than others, and that helps to deliver value through all the partners who are selling their product.

The endpoint protection is solid. One of the easiest things for us to do is to deploy the agent. It does not matter whether the client is infected or not infected. As soon as Huntress is deployed, it is good. It is easy for us to manage from our end. It tells us exactly what we need to see. It caught things that we could not catch with the traditional antivirus program. We have a way to tell clients that we have given them the greatest endpoint protection ever made, and it caught a few more virus programs. Would they like the deployment for the rest of their company? Most of the time, that is an easy sell on our end.

It has been making our lives so much easier. In the past, we had to spend hours and hours trying to look for the threat, whereas now, we can just put Huntress to immediately find out the threat and what needs to be done. Sometimes, some of the automatic remediations just happen without us even knowing, and we learn about it afterward. We also needed it because of the growing need for cybersecurity insurance compliance in Canada.

We use Huntress' ability to automatically remediate low-severity threats. 

It is integrated with Microsoft Defender. Once we have sold the Defender suite to a client, we integrate that with Huntress. Huntress is the EDR and also the MDR portion to manage any sort of alerts that arise.

Huntress has helped reduce the need for expensive security tools or to hire expensive security analysts. Our techs may or may not need to have a very high level of skills. We are also using Huntress as a tool to help us to answer some of the questions. It empowers the techs, and at the same time, we are spending less money.

Huntress has improved our security dramatically. Especially seeing that there is a growing need in the security space, we wanted to make sure that we have a good partner to work with.

The endpoint protection is definitely the most impactful feature for clients.

It just works. It is a set-it-and-forget-it type of solution.

There should be more engagement with the MSP group or their largest clients. They should have focus group discussions on what they can do to improve the product. A more transparent way for the support team at Huntress and our IT team to collaborate to make it faster and easier would be beneficial. It does not mean that the current support team is not doing its job, but if you look at the marketplace, the selling point of one of the competitors Blackpoint Cyber is a more cohesive work-as-a-team approach when it comes to support. I have heard that other MSP businesses using Blackpoint find it to be a much better experience in comparison to Huntress. While we are happy with Huntress, that is one area that everybody is saying can be improved.

I have used the solution for about a good four years.

I have not experienced any lagging, crashing, or downtime. Adding the load on the endpoints, like any security solution, makes the system slower, but we explain that to the client beforehand.

It is pretty easy to use.

We did not use any solution previously. 

It is working for us, so we do not want to change.

It is a cloud solution. The initial setup is relatively easy. It probably took a couple of hours per client, and all deployments were done.

The implementation is a one-person effort.

I would advise talking to them and engaging with the team. Figure out what is needed to support clients. Huntress is not for everyone. Understand different clients' requirements, and do not be thrown off by regulatory changes. We are a Canadian MSP business, specifically legal. We know the business needs well. You need to know what you need. Hunt for it. Huntress works for us but may not for everyone. 

Overall, I would rate it a nine out of ten.

We use Huntress Managed EDR as part of our tech offering for enhanced security, especially for small and medium businesses.

The most valuable features of Huntress Managed EDR include the SIEM and the log ingestion from firewalls; it has been really effective for managing our security. Huntress Managed EDR has positively impacted my organization by significantly reducing tickets coming to the SOC team; we have seen far less noise in terms of tickets since its implementation.

There are some drawbacks in Huntress Managed EDR, particularly with the security awareness training aspect which is more manual than expected compared to something like KnowBe4. 

It could be improved in terms of campaign setup in the security awareness training section of Huntress Managed EDR. The campaign setup in Huntress Managed EDR could be easier, as it requires more manual configuration than anticipated.

Their technical support is reliable and effective.

Positive

I have previously used SentinelOne and Blackpoint before Huntress Managed EDR.

I was personally involved in the deployment process of Huntress Managed EDR.

Using Huntress Managed EDR has indeed reduced the need for expensive security tools or the hiring of additional expensive security analysts. Without Huntress Managed EDR, we would face much higher operational expenses.

SentinelOne does achieve similar security goals, but Huntress Managed EDR has less noise, while Blackpoint doesn't operate at the same level as Huntress or SentinelOne. The difference between Huntress Managed EDR and Blackpoint's SOC team is that Huntress is more responsive, providing detailed reports and helpful guidance.

I combine Huntress Managed EDR with Capture Client, which is a mixture of Windows Defender and SonicWall Capture Client as our EDR. I am satisfied with how the automatic remediation in Huntress Managed EDR works; it has been helpful. I'm pretty satisfied with their work. 

Huntress Managed EDR is pretty easy to use once you're familiar with what it does and have access to it.

We are an MSP, so we use Huntress Managed EDR internally as well as for our customers that we support. After deploying Huntress Managed EDR, I saw almost instant improvement in our organization's security, specifically with a significant cut down in SOC tickets. 

We make use of Huntress Managed EDR's ability to automatically remediate low-severity threats. The automatic remediation in Huntress Managed EDR has been very helpful for our workload and security.

My overall rating for Huntress Managed EDR would be about eight and a half, almost nine.

We use Huntress to monitor our internal and customer systems for security vulnerabilities.

We chose Huntress for its 24/7 managed detection and response services.

Huntress is deployed entirely in the cloud. We use the Huntress portal to manage it and our RMM tool to distribute the agent to our devices.

Huntress is a great option for the SMB market. It's competitively priced and offers good value for the money, making it one of the most cost-effective security solutions available. Its team is highly qualified and delivers a quality product at a price point that fits the SMB budget. Enterprise tools can often be overly complex or expensive, and Huntress effectively addresses both of these concerns.

It's extremely easy overall. We deploy the agent and it takes care of the rest.

Huntress enhances visibility into endpoint activity by monitoring running processes. It employs a 24/7 human response team to analyze alerts from both the Huntress agent and Windows Defender Endpoint Protection. This team can then choose to isolate suspicious activity and limit its impact if deemed malicious, or escalate the case for further investigation.

Some endpoint protection solutions may miss early warning signs of suspicious activity, such as unusual system behavior or potential footholds for attackers. This is often the case when deploying such solutions to new customers. However, it's important to remember that malicious activity doesn't happen every day in every environment. So, for some customers, its value might not be immediately apparent. It might take a few years before a serious incident occurs, highlighting the need for Huntress' detection and response capabilities. Therefore, the timeframe to see the benefits of Huntress can vary greatly.

The fully managed service has certainly reduced the effort needed for handling alerts from endpoint protection solutions like Windows Defender. Eliminating the need to deal with false positives has been a significant benefit, greatly reducing our team's workload. Additionally, the SOC within the service effectively handles after-hours issues, minimizing the impact on our on-call staff.

Instead of relying on expensive endpoint protection software, we successfully leveraged the built-in Windows Defender in conjunction with the Huntress agent. This combination, in our opinion, represents a significant improvement over using a potentially more robust but costly solution alone. The key advantage lies in the added human element: Huntress' 24/7 monitoring and endpoint isolation capabilities. This approach has demonstrably improved our security posture. However, it's unclear whether it fully eliminates the need for a high-cost security analyst. While Huntress certainly reduces expenses associated with lower-level resources tasked with the initial triage of false positive alerts, its impact on the role of a specialized security analyst remains to be determined.

It has improved our overall security significantly. It adds another valuable layer of protection and provides greater visibility into endpoint activity. Perhaps the most significant benefit for us is the true 24/7 coverage. While our staff has extended hours, there's a gap overnight when no one is actively monitoring for security incidents. When time is of the essence, as it often is in cyber situations, having someone from Huntress available to instantly respond by isolating threats is invaluable. This service is certainly more cost-effective than attempting to staff our team for round-the-clock coverage.

Our security started improving immediately after deployment. It began searching for pre-existing footholds or remnants of other malware that may not have been fully cleaned up from previous infections. The 24/7 SOC provided instant benefits—knowing we had that extra layer of protection with dedicated experts watching our systems was a reassuring feeling.

The most valuable aspect of Huntress is its 24/7 SOC service. If something suspicious is seen on an endpoint, even in the middle of the night, there is always someone available to react quickly and isolate the endpoint to mitigate the potential spread to others. 

Huntress' Process Insights feature could benefit from more robust search and filtering capabilities. Currently, it's quite basic, offering only a single search bar with limited granularity. Additionally, the data retention period is short, with access restricted to three days. While the SOC team can export a week's worth of data, extending this period to at least thirty days would be highly beneficial.

Overall, we're generally satisfied with the solution. However, deeper integration with other endpoint protection platforms would be valuable. Ideally, Huntress should be able to ingest alerts from systems like CrowdStrike and conduct investigations similar to CrowdStrike's offerings. This would be particularly useful for us as a CrowdStrike partner.

I have been using Huntress for three years.

Last week, we encountered an issue with the Huntress agent. Essentially, there are two components: the core Huntress agent and the Rio agent, added later about a year into our partnership for process insights. While Rio is valuable, we experienced a communication gap regarding its functionality.

If Rio shut down for any reason e.g., computer reboot, or agent update, it wouldn't restart properly, creating a blind spot for the Hunter team as no data was transmitted. This issue emerged within the past two weeks and took a few days for Huntress to identify and resolve.

Overall, the platform is generally stable, but we've faced some bumps in the road. One issue involved unclear communication about agent check-ins, and the other was the recent Rio shutdown problem.

Huntress scales very well. We've grown from approximately 9,000 to 17,000 endpoints, and I haven't encountered any scalability issues.

We're generally very pleased with the technical support. They respond promptly via chat, and if the frontline team can't resolve an issue, they escalate it swiftly. In one instance, their SOC analysts even helped us investigate malicious activity at our endpoints, something that deeply concerned us and our customers. In that situation, they truly went above and beyond to assist us.

Positive

We previously used Webroot, but it was ineffective at stopping the latest ransomware threats. That was the main reason we switched to Huntress. We replaced Webroot with the built-in Windows Defender plus the Huntress agent, and together they proved significantly more effective at stopping those threats than Webroot alone.

The initial deployment was smooth. However, we realized a gap in our internal processes and understanding of how to respond to different alert levels.

Our deployment was rushed due to signing the agreement during the Log4J vulnerability outbreak around Christmas 2020. The widespread threat forced us to prioritize deploying the Huntress agent quickly instead of following a slower, more deliberate approach to replacing Webroot.

Fortunately, the Huntress agent seamlessly integrates with other endpoint protection solutions. This allowed deployment without disrupting existing protection or leaving us vulnerable during the transition.

The additional 24/7 SOC visibility without replacing our current endpoint protection has been immensely valuable. While deployment was simple, we identified the need to refine internal processes and response protocols for different alert levels.

We had a small team, perhaps two or three people, working on the deployment. In all honesty, it could have been done by a single person. Our deployment process is streamlined, and we have a large customer base. As a mid-sized MSP with over two hundred customers at the time, we had the manpower to spare. However, thanks to scripting and RMM tools, even a single individual could theoretically deploy Huntress to a large number of endpoints with ease.

Being an MSP, we implemented the solution internally.

Huntress is priced fairly for the services and value it provides.

I would rate Huntress nine out of ten.

Our team occasionally uses the automatic remediation feature for low-severity threats, but we don't heavily rely on it. When it comes to endpoint protection alerts, we prefer a more hands-on approach. Despite using automatic remediation to some extent, the feature's impact on our workload has been minimal.

The biggest maintenance challenge with Huntress is the potential for certain firewalls, especially Fortinet models depending on their enabled features, to block communication from the agent on the endpoint back to the Huntress portal. This blockage isn't apparent from the endpoint itself. While the Huntress page might appear installed and running, the agent might have only checked in initially and stopped sending data. After a month of inactivity, Huntress removes the agent to prevent the portal from becoming overloaded with inactive agents. This creates blind spots in our monitoring, as we remain unaware of the missing data. Addressing this challenge has been difficult, as we rely on our RMM tool for endpoint management and strive to maintain a consistent active list. Continuously comparing this list with the Huntress portal to ensure they match has proven frustrating.

When using Huntress the most crucial aspect is training our internal staff on how to respond to different alert levels. These levels typically fall into three categories: low, high, and critical. It's essential to have a clear action plan or standard operating procedure outlining how our team should handle each alert type. Additionally, basic training on the Huntress portal is recommended. The portal has various pages, modules, and tabs, so familiarizing our staff with navigating and interacting with it is crucial. This includes skills like isolating endpoints, removing isolation if necessary, and utilizing provided remediation tasks or manual remediation if preferred. Implementing these measures will significantly improve our incident response capability.

Over the years, Huntress has gained many features, but initially, it was the foothold detection that drew us to the solution. It excels at uncovering persistent threats that evade other security measures. Our staff often compares it to a baseball backstop: you might not hit every pitch, and the catcher might miss a ball, but the backstop is there to prevent a disaster. In the same way, Huntress acts as a safety net, a team of experts searching for threats that slip past other security layers.

We observed threat actors continually refining their attack methods against the managed endpoints of our diverse clientele. We sought a security tool that avoided exaggerated claims of absolute protection. We understand that perfect security doesn't exist. Instead, we prioritized finding a partner with integrity and a genuine commitment to the SMB security mission, both for our clients and the broader community. Even before becoming an investor and customer, Huntress impressed us with their educational approach. They actively engage the MSP community, providing valuable knowledge, training, and insights into current threats. Their focus on raising security awareness before securing contracts resonated deeply with us. We admire their company culture and approach.

Our client base presents a mixed deployment landscape. Some, particularly those in manufacturing, maintain significant on-premises infrastructure. In contrast, others have fully embraced the cloud and haven't adopted serverless technologies like the ones we offer. Therefore, our platform must cater to this diverse range of deployment models.

Huntress was likely the easiest tool we've ever deployed. It's low-touch, and we didn't anticipate any problems. The worst-case scenario would be an issue with their internet connection, but otherwise, it requires minimal interaction with the machines. Users are unaware of its background operation; it doesn't make changes or enforce rules initially, making the rollout very smooth. We even deployed it internally before broader implementation to familiarize ourselves and ensure it wouldn't cause any harm. My confidence stemmed from its ease of use and the high quality of its product.

It is a cost-effective solution for the SMB market. It allows us to keep our costs competitive while ensuring optimal protection for our clients. Additionally, it instills a sense of quality and reliability in our operations. After all, we are human, and mistakes are inevitable. Huntress provides peace of mind for the MSP side by helping us mitigate those potential oversights.

We observed the benefits of Huntress within the first two weeks of deployment. We discovered several previously unknown aspects of the managed environment. Subsequently, after implementing the change to simply push them out of their base stack, we were able to quickly identify well-responding machines, those requiring attention, and malfunctioning Wi-Fi protection. This process effectively illuminated areas requiring improvement from a management perspective.

The fact that the Huntress system is managed 24/7/365 is extremely helpful for our workloads. Our staff typically works from seven in the morning to five in the afternoon, so there's only a small overlap with Huntress' coverage. However, we greatly benefit from them keeping an eye on things and being able to alert us in the middle of the night if something suspicious happens. We're very thankful for their round-the-clock monitoring, as it saves us from having to keep our staff up late or hire additional workers for overnight hours. This, in turn, saves us money on labor costs.

There’s a feature that allows us to automatically remediate low-severity threats, and we have enabled it for certain clients. This feature has significantly reduced the number of minor issues that our SOC team would usually deal with, freeing them to focus on higher-level threats and more strategic tasks.

Huntress has significantly improved our security posture. Their team provides exceptional vigilance, staying informed about emerging threats and tracking the tactics of bad actors. We've seen numerous instances where they've detected threats just as they activated. In some cases, we simply isolated the affected machine, while in others it didn't require such immediate action. Remarkably, a month later, the FBI contacted us to inquire about one of these potential threats. Fortunately, thanks to Huntress' swift intervention, there was no actual danger. This experience highlights their cutting-edge expertise, not just in technology, but also in understanding the evolving tactics of cybercriminals. They consistently stay ahead of the curve, or at least keep pace with, the ever-changing threat landscape.

Huntress helps to reduce the need for expensive security tools and analysts. We have a superior base layer compared to just offering a standalone product. While it is a tool, it's also a product and service that includes access to the Huntress team's expertise. Their threat operations team monitors potential threats, so we don't need to dedicate our own time and resources to analyzing logs and information. They essentially do it for us.

Finding cost-effective security partners is crucial, as we navigate competing demands. Some clients expect high effectiveness and demonstrably high value, while other vendor tools see rising costs. It's key to identify partners who deliver demonstrably good value for our investment, maximizing our effectiveness through optimized time and resource allocation.

We begin to see improvements in our company's security within two days of deployment. Pushing the installation requires minimal effort. Typically, suspicious activity becomes apparent within the first 24 to 48 hours, which the system highlights immediately. After a week or two, the system learns usage patterns and adapts to the environment, providing us with a comprehensive understanding of our security posture. By then, we've proactively addressed any identified issues, resulting in a swift and efficient security monitoring process.

Foothold detection is a valuable feature, acting as a valuable second set of eyes for both us and our clients. However, what truly convinced us to make it a core part of our security stack, instead of just deploying it selectively based on specific needs, was Huntress' introduction of Managed AV. This allowed us to replace our basic antivirus solution often Windows Defender for our predominantly Windows environment with a more robust option managed by Huntress. Managed AV essentially made Huntress our new baseline antivirus, replacing Windows Defender, while still allowing us to utilize premium solutions like SentinelOne for specific situations. Ultimately, this shift enabled us to expand our footprint from around 400-500 machines to an impressive 4,600.

I'd like Huntress to implement a component that can analyze network traffic for specific sites. This involves deploying network sensors that monitor beyond just endpoint data, which they currently gather, and identity information through their 365 integration. This additional layer would offer site-level visibility, allowing us to detect suspicious traffic even on devices where the Huntress endpoint agent can't be installed. For example, in manufacturing environments, network devices and IoT devices might not be compatible with the agent. Comprehensive site-wide visibility would significantly enhance our security posture.

I have been using Huntress for around four years.

Huntress is stable. We have not encountered any issues.

Easy scalability that requires minimal time investment from us. Their platform readily handles our needs.

We've been using their service for years now with minimal technical issues. However, I've contacted their technical support several times, usually regarding security-related alerts. In some cases, it was a matter of needing clarification, while other times we simply couldn't find the relevant documentation. We wanted additional information about these alerts to improve our understanding and prevent future issues. Sometimes they get busy and their response time is slow but the quality of their service is great.

Positive

Previously, we used a variety of security solutions, but none specifically addressed the gap where users require items to be forwarded to other security layers. We solely relied on antivirus software or various EDR solutions at the time. We simply made the most of those tools available. Huntress did replace antivirus programs like Bitdefender and Webroot for us. Because we could utilize Managed AV, we no longer needed those other products. In that sense, it did take their place. However, Huntress entered the market to fill a previously unmet need and created a new market segment.

The initial deployment was smooth, even when we encountered some misalignments between our expectations and reality, or when we had to adjust initial assumptions. Fortunately, we were able to rectify these issues quickly by modifying the agents. For example, if an agent was assigned to the wrong client, we could make a prompt correction.

Overall, the deployment was very straightforward thanks to the ease of using PowerShell. The developers did a fantastic job making the process as user-friendly as possible.

One person was required for the deployment.

We handled the deployment internally, leveraging our existing RMM tool which already manages and deploys other software.

Huntress boasts a high return on investment. This translates to needing fewer staff dedicated to analyzing security tools, which is a significant benefit for us. Consequently, labor costs associated with incident monitoring decrease. Additionally, it provides a dedicated Security Operations Center team that continuously monitors for threats. Essentially, it's like getting two solutions for the price of one. I imagine the reduction in personnel costs would at least cover half the expense of incident investigation and response, which are typically more costly with other solutions. Overall, the ROI from Huntress is evident in our daily operations. The peace of mind and improved sleep Huntress brings are invaluable.

While other options have emerged since Huntress' arrival, I believe it still offers the best value for the features and services it provides.

Many alternative security solutions originated from the enterprise market, resulting in high pricing that didn't fit our MSP pricing model for smaller clients. Additionally, while existing antivirus vendors offered bolted-on MSP options, standalone SOC services often lacked cost-effective models per endpoint. At the time, nothing quite like Huntress existed in the market.

I would rate Huntress ten out of ten.

Huntress is doing exactly what we need. However, we haven't fully explored its potential for expansion. Previously, my main request was Microsoft 365 integration, which they are now working on. We're currently conducting some early pilot tests with it. In essence, that integration addressed the major gap I identified.

Most multi-tenant tools involve a dashboard, user interface, and the ability to create sub-organizations or child accounts. Each child account has access to all purchased products under its parent account. The key requirement is ensuring machines are accurately tagged to their respective companies. While infrequent, maintaining these tags involves verifying their correctness and fixing minor issues, such as typos or inconsistencies. This applies to most multi-tenant tools, not specific to Huntress. However, Huntress simplifies this process compared to other solutions. Unlike requiring uninstallation or redeployment in other tools, Huntress allows seamless correction and movement of tagged machines, minimizing errors and streamlining management.

As long as we understand the platform's capabilities and the value it provides, we can avoid any misconceptions. I believe many MSPs tend to get overly excited about any new tool. We've faced similar challenges in the past, so it's crucial to remember that this isn't a "deploy and forget" solution. While the platform simplifies the process significantly, some effort is still required on our end to ensure proper configuration before deployment. It's more of a "set it and manage" tool compared to the others we use. Therefore, understanding the product, its position in our security stack, and how it complements existing tools is essential. We need to know how to explain its role and support it effectively for our clients. That's the key takeaway. Knowing its place in the security stack is fundamental.

It integrates seamlessly with RMM, making it easy to roll out and use. Many fixes are automated, so you can approve them and let the system handle them, avoiding the need to go through individual steps. If something serious comes up, they proactively make phone calls and lock things down in advance. It simplifies my job rather than adding it.

It has improved my organization by making things easier.

After deployment, it takes some time to scan and process everything. Huntress has effectively flagged issues such as password files on desktops, which it identifies as low-level alerts. It also handles more significant threats effectively. The system runs in the background and uses sample files to detect ransomware attacks quickly. If an attack occurs, Huntress can isolate the affected machine promptly. We noticed benefits and problem-solving capabilities within the first week.

I had been requesting Huntress support for macOS for a while, and they recently rolled it out, making it generally available within two months. Having a regular support line would be good.

I have been using Huntress for a year and a half or two.

There are no issues with stability.

This solution is used by 400 machines. It scales independently. When we add clients to our RMM, the script runs every night and automatically adds Huntress to the new clients and their machines.

Support was quick. They made it easy for us to get assistance when needed. They responded promptly to our inquiries about upcoming products and provided timely support to get things rolling. We were tweaking our scripts, and they directed us to their repository of scripts and resources. When I encountered an issue, they suggested hopping on a call to walk me through it rather than just relying on chat. They resolved the issue relatively quickly.

Positive

Huntress provided ease of use and a lower spend. The sales team was supportive throughout the process, not just during the initial setup. They helped with scripting and ensured we were fully operational before stepping back, which made things much easier for me.

The pricing is great.

Their minimum spend is quite low, unlike some vendors that require $500 or $1,000 a month. It's around $50, so you can start with just a few clients if you're new or scale up if you're larger. Their products integrate well with our existing systems and perform effectively.

I’ve worked with some vendors whose implementations were so complex that managing the solution required almost a full-time person. In contrast, Huntress was straightforward to deploy. You set a few permissions, and then it just runs in the background. This simplified things and made managing the software much easier.

Huntress is largely set-it-and-forget-it. The only real maintenance involves handling remediation for attacked machines rather than ongoing upkeep. The recent addition of Mac support required a new script.

Overall, I rate the solution a ten out of ten.

We use the solution as our antivirus.

We were looking for a more lightweight solution for an antivirus. We've had some in the past that have been really hard to either install, uninstall, and work with. Huntress integrated right in with Microsoft Defender, and it worked perfectly.

The automatic remediation is the most valuable feature for us. It works great. If our team can't look at an issue exactly at the moment, it's just good to know that there's Huntress that can come in and be able to remediate most, if not all, issues. If there's something that needs a further look at, we can automate the alerts. It's proven to be a lot more efficient than other antiviruses we've worked with in the past.

It's easy to use Huntress overall. I haven't had too many issues. I haven't really had to contact or support with anything. So far, so good.

Huntress is a solution tailored specifically for the small and medium business market. It sits on top of Windows Defender, so you do not have to have either expertise or other software. It works well as a standalone client. 

Removal, specifically, has been very, very nice. Others have been clunky when it comes to removing files or the application itself. Huntress has the uninstall option straight from the admin portal. That's been a great great feature.

We've witnessed the benefits of Huntress both immediately after we deployed it, and after some time. The ease of use was noticed immediately. But then, eventually, when it comes to either losing a client or having someone who's left having to remove it from their machine, just having the ability to uninstall very seamlessly becomes very useful.

The solution is fully managed by Huntress 24/7. It's reduced our workload in terms of triaging or managing alerts. It's very much reduced the attention to detail that we've needed to have, especially since it's such a reputable company. We feel confident in having them remediate some issues so that we don't have to be looking at them all the time.

Huntress helped us to reduce the need for expensive security tools or expensive security analysts. That's very important, especially with us being a smaller business. Not having to purchase larger software has been great.

I don't know if our organizational security has drastically improved. However, it has done what it needs to do. We haven't lost security; we've maybe become more secure with it. That said, just having that presence of mind, knowing that we do have a very sophisticated team and product behind us, has been wonderful. 

The integration with our RMM could be better. That's been one of the tougher things. Having more availability to integrate with RMM is what we need right now. Even though we can create a script, it doesn't always work as seamlessly as it should. 

I've used the solution for about a year. 

The stability has been great. We've had no issues. 

I haven't had the chance to scale. However, there seem to be no issues with scaling up or down. 

The availability of SOC-team support is great. They are friendly and offer good advice. It's not as big of a company as other solutions, yet the support team seems to be on top of things. 

In terms of ongoing support, there has only been one or two times when we wanted some further clarity on a remediation that had been completed. That was about it. The ease of communication is great. You aren't on hold and you aren't passed around to different people. Their support is pretty state-of-the-art.

Positive

We have previously used SentinelOne and Sophos. We switched over to Huntress completely and no longer use them. We primarily switched based on pricing.

The initial setup was really easy. It just sits on top of Windows Defender, so it was very easy. After that, just configuring the the different profiles and policies that we wanted to apply had to be done, and that was a very easy process. The deployment itself took about a week. 

In terms of maintenance, so far, it auto-updates. 

Might have had a third party assist in the implementation. 

The cost-effectiveness of Huntress, compared to other solutions, is much greater. The pricing is good. It's where it should be.

We did shop around a bit. However, with the price, it was a pretty easy decision.

I'd rate the solution ten out of ten. 

New users should mostly ensure that they know that this product is going to stand on top of Windows Defender and integrate with it. If someone is utilizing Windows Defender, they just need to ensure that they know that this product has to operate with Windows Defender to get its full capability.

We use Huntress to safeguard our endpoints as an additional security layer complementing our traditional antivirus solution. If the primary antivirus fails to identify a threat, Huntress is a crucial backup that fulfills our security requirements.

The Huntress interface is relatively easy to use. I had little to no training and had not used Huntress enough to navigate its website or fully understand its use case. It was simple to use.

Huntress is great for small and medium business markets. The value is excellent as well. It is a cost-effective solution, and the integration pieces that we're using with it are phenomenal.

I saw the true potential of Huntress a month after we implemented it.

Huntress's 24/7 monitoring has been invaluable for triaging and managing alerts. The platform handles most of the monitoring, allowing us to focus on understanding the alerts, their nature, functionality, and the detected threats. This approach has significantly improved our efficiency in this area.

Huntress's ability to automatically remediate low-severity threats has streamlined our workflow process, making it faster to respond.

Huntress has helped us reduce the need for expensive security tools or to hire costly security analysts. We're not big enough to have a large SOC team, so this has helped us until we can reach that level of growth.

Huntress helps protect our endpoints when traditional antivirus is not enough. So, we will rely heavily on it when our traditional antivirus software does not catch the threat.

The features of Huntress that I found helpful are the one-click remediation piece and the ability for me to reach out to their customer service reps and get this under control when there is a threat. I see it as a great way to isolate and remediate on the fly quickly. We did have a use case for that recently that worked out well.

I requested Huntress customer support to implement a feature enabling me to email myself generated reports or alerts, which I could then forward to our client. While this specific feature was unavailable, Huntress customer service successfully assisted us in obtaining the necessary email information. To enhance the platform, I suggest adding a feature to forward Huntress's recommended response directly to the client, ensuring their clear understanding of the gathered information.

I have been using Huntress for one and a half years.

Huntress offers super reliable and rock-solid performance. We have not encountered any troubleshooting issues or problems with the software; it works as expected.

The cloud-based nature of Huntress management allows for exceptional scalability. We can easily add licenses or agents as needed, and we haven't encountered any scaling limitations thus far.

I contacted Huntress technical support once about a ransomware attack, and they responded promptly and effectively. We contained the attack within an hour.

Positive

The Huntress pricing is an excellent value for what the product provides. It's a managed EDR solution with fair features, and I think it's great.

We have considered other solutions. The other EDR solution we considered was SentinelOne. We did look at SentinelOne, but we did not make a choice.

I did not choose Huntress. When I started a year and a half ago, Huntress was already implemented. However, with Huntress already implemented, it made it very clear that, given what we had recently worked on with one of our clients, Huntress was our best choice.

I would rate Huntress ten out of ten.

We have experienced no maintenance requirements with Huntress, as our RMM solution automates most processes. Consequently, we do not need to address deployment, maintenance, or troubleshooting issues related to Huntress; it functions seamlessly.

New users need to be prepared for incident responses from Huntress. If they do not have an incident response plan, they need to create one first so they can handle and remediate quickly for their clients.