Huntress Managed EDR Reviews

I deploy Huntress to my mid-tier clients to leverage 24/7, 365 threat-hunting capabilities.

Huntress monitors for anomalous behaviors and detections that would otherwise be perceived as just noise and filters through that noise to pull out the important bits. It then alerts me with the remediation steps needed to fix those problems and offers to automatically deploy those fixes if I wish. This enables me to manage and monitor way more endpoints than I would normally be able to.

Huntress' best feature is the threat-hunting expertise that is part of their 24/7 SOC. They investigate anything they don't know about, and I've had things that look like benign detections returned to me as serious threats with advice on how to fix them.

Some of Huntress' reporting could be improved. Specifically, when we get a notification that something has been investigated and found benign, we don't get any information about which devices the issue was on. It's not until we get an actual action plan for a threat above a certain threshold or representing a certain compromise that we know exactly what device is involved. In the next release, Huntress should include better integration with AV or endpoint detection and other response solutions than Windows Defender.

I've been using Huntress for close to a year.

I would give Huntress a rating of nine out of ten. The only thing that rivals it is SentinelOne Complete when it's managed and monitored by a security operations center like the offering by OverWatch.