Huntress Managed EDR Reviews

We roll Huntress out across the board. It's in our base security shield, so we use it everywhere. We also use ThreatLocker. It's an application for allowlisting and blocklisting. It blocks any software from running unless you approve it. Huntress is there in case we approve something that we shouldn't or if something that we already approved gets an update with something wrong.

When our partners rolled Huntress out, we discovered remnants of things that had already been taken care of, but it immediately showed me things that were a problem. Huntress has alerted us a few dozen times when a user did something silly, like clicking or downloading something. It would have been catastrophic had we not had Huntress there.

We advertise that it's the number one EDR we're using and actively ensure all our tools are the best in breed. We have a reputation for using the best-in-breed software, so Huntress has greatly helped.

It's fantastic for the SMB market. Their motto is something like "Cybersecurity for the Rest of Us." It's marketed to small mom-and-pop organizations, but we also use it for fairly large companies. Typically, an enterprise-grade tool isn't available for anybody under 50 users. Huntress makes it so that it can be deployed anywhere and everywhere. It's not bugging the client to tell them things they don't know how to do. It brings all of that back to us, and then we can take action on things that are a problem.

Huntress is effortless to use. It's one of the easiest products to deploy. Pushing out through our RMM is simple, and using it is straightforward once it's on a machine. The end user doesn't have to do anything. Everything comes back to us. I love that the alerts are human-curated. They take a look at alerts before we get them. Other products are very noisy. They'll send you an alert about anything. About 95 percent of those alerts go to Huntress first. They check to make sure that it's real and only alert us if it's actionable, something that requires our attention. When I get an alert from Huntress, it must be looked at. I love that. It saves a ton of time for my people.

It can fix low-severity threats. Their team is 24/7, whereas my team is not. We want them to take action on known bad things. Sometimes, that means fixing the problem or isolating the machine so multiple machines aren't getting hit. I love that they can address those issues within a very short time.

One issue is the managed antivirus. Huntress takes control of the antivirus built into Windows Defender, but it doesn't if, for some reason, Defender isn't working properly and doesn't attempt to fix it. We have to fix it with some scripts so that Defender reports correctly to Huntress. It would be nice if they took that action on our behalf. If they saw a problem with Defender, they should roll out a fix. 

I have used Huntress for four years.

Huntress is extremely well-written software. I used to be a developer, and I see how they've written it. It's excellent. I've never had an issue with it crashing a machine. It's small, tight code.

I rate Huntress support nine out of 10. It's excellent. I'm friends with many of the people at the top at Huntress so I can phone somebody quickly, and they'll escalate the ticket. If I go the usual route, somebody will call us back in an hour or two. Some of their competitors are a little quicker with a live answer, but Huntress is still better than 99 percent of their competitors.

We had another solution called enSilo that Fortinet purchased, and it became FortiEDR. EnSilo was an excellent tool, but it became noisy after Fortinet purchased it. We spent lots of time reviewing and approving things. Our people started getting alert fatigue where they were just accepting everything coming their way. it meant they weren't likely to find when there was a needle in the haystack.

Huntress is probably the easiest tool to deploy. We deploy many products through our RMM, and it's probably the simplest. It only takes less than 10 minutes. We have a policy that says if the machine doesn't have Huntress, it runs the script. We've deployed Huntress to thousands of machines immediately.

We had the script written. With others, you need to put in a license key per client and create documentation for which client uses a license key. Huntress doesn't have that. They have a site license, and they pull the client's name from our RMM. We can just run the same script for every client. It doesn't matter whether we have hundreds of clients or thousands of clients. You can choose all of them and run the script. 

Huntress requires a little maintenance. The big thing is managed antivirus. We have to ensure it's working and have a recurring monthly ticket where somebody goes in and looks at those things.

Huntress is an easy sell to clients because it does all the heavy lifting. Sometimes, they will buck a little at the price because they want a free antivirus or EDR. We tell them that we use Huntress on all our machines. That is our standard process for all the machines we roll out. When we give that advice, people are pretty willing to say okay. 

We looked at SentinelOne and several others, including DeepArmor and Blackberry Cylance. 

I rate Huntress 10 out of 10. They're one of my favorites. I call Huntress a partner, which isn't something I say about every vendor we deal with.

Huntress Managed EDR is my main use case as part of a package for our managed and co-managed IT services. A specific example of how I use Huntress in my managed or co-managed IT services is that it is a part of the package that we sell.

The best features Huntress Managed EDR offers are security and the service received from the Huntress team.

What I appreciate about the security features and the service from the Huntress team is that they always come prepared to meetings, are proactive, and definitely pay a lot of attention to the partnership.

Huntress Managed EDR has positively impacted my organization because they have great reviews online, a raving fan base, and their social media is positive. When we are soliciting an IT services package with Huntress Managed EDR attached, that goes in a positive direction.

I do not have any comments at this time that would help improve Huntress Managed EDR.

I have been using Huntress Managed EDR for two years.

The customer support from Huntress is better. I have used or evaluated other similar solutions, and while the protection has been similar, the support from the Huntress team is what is better.

When I include Huntress Managed EDR in my package, it is more about the reputation and trust. We do not see necessarily an uptick right now by just using the Huntress Managed EDR name.

Huntress Managed EDR is easy enough for me to use.

I probably evaluate Huntress Managed EDR as a solution specifically for the SMB market incorrectly; the VP of Managed Services is probably the right one.

Using Huntress Managed EDR has helped reduce the need for expensive security tools or to hire expensive security analysts, and it is important because we save money.

I do not have any idea how much we are saving or an example of how Huntress Managed EDR helped reduce those costs.

My advice to others looking into using Huntress Managed EDR is that I would recommend it.

I do not have any additional thoughts about Huntress Managed EDR before we wrap up.

I rate Huntress Managed EDR overall as a 10.

We needed a solution to monitor two customer servers and a desktop server for threats, particularly during development. Therefore, we chose Huntress Managed EDR.

Huntress Managed EDR is easy to use.

We like that Huntress Managed EDR is focused on the SMB market.

Since implementing Huntress Managed EDR, we have not had any threat issues.

One of the main features we appreciate about Huntress is the human element involved in triaging and determining the severity of a problem before forwarding an alert. We value this managed service approach that provides an additional layer of support and analysis.

Huntress Managed EDR eliminates the need to outsource expensive security tools or analysts, avoiding the high costs associated with external solutions. This comprehensive product provides the necessary capabilities in-house, saving us from the financial burden of outsourcing.

Huntress has allowed us to discontinue the use of Webroot and utilize the free, built-in Windows Defender antivirus system, which they manage as part of their product feature set. We now use Huntress EDR combined with Huntress Managed Windows Defender.

The most valuable aspect of Huntress Managed EDR is its personalized approach. As a dedicated company focused solely on this service, Huntress prioritizes individual relationships and provides attentive support, unlike larger corporations with diverse product portfolios. This fosters a sense of trust and partnership, ensuring clients receive direct and committed assistance.

The support Huntress provides is valuable.

The integration with Autotask could be improved. Currently, it doesn't classify the "installed product" or "configuration item," as they are called in Autotask, preventing automated handling. Additionally, updates could flow more seamlessly to Autotask. Overall, a more enhanced integration would be beneficial.

I have been using Huntress Managed EDR for five years.

I would rate the stability of Huntress Managed EDR nine out of ten.

I would rate the scalability of Huntress Managed EDR ten out of ten.

The technical support provides that personal service and proactiveness.

Positive

The deployment is straightforward because it's rolled out via our Datto RMM system. Huntress Managed EDR takes five seconds to roll out per device.

Huntress Managed EDR offers a fair pricing model. While the initial cost was low and has since increased, it has stabilized at a reasonable rate. The introduction of Managed Defender allowed us to transition clients from Webroot to Huntress without a significant price difference. The savings from utilizing the included Windows Defender offset the cost of Huntress Managed EDR, making it an affordable solution overall.

I would rate Huntress Managed EDR nine out of ten.

Our management system has an automated routine that automatically reinstalls Huntress if it's ever uninstalled, eliminating overhead. Occasionally, an agent might get stuck at a specific version, requiring manual remediation. This might involve a minimal time commitment of approximately an hour per month to check for updates and ensure all versions and statuses are current.

As a Managed Service Provider, we deploy Huntress Managed EDR to all our customers, covering approximately 1,400 endpoints. Our team of ten technicians utilizes the platform to serve our clientele, which predominantly consists of hotels in the hospitality industry.

While alternative solutions might be preferable in certain situations, I would generally recommend Huntress Managed EDR.

We're a managed service provider, so we resell Huntress Managed EDR to our customers. We use the EDR and the MDR products, which provide endpoint and 365 protection.

Huntress Managed EDR is remarkably user-friendly. It excels at identifying threats and provides transparent, actionable information about the following steps to take when a threat is detected.

We use Huntress in both the SMB and enterprise markets. I don't differentiate between them, as it works great for both.

We saw the benefits of Huntress Managed EDR immediately.

The Huntress team's consistent monitoring is excellent for triaging and managing alerts, which benefits our workloads. They are also a great team to work with.

Huntress's ability to automatically remediate low-severity threats helps reduce our workload.

The way Huntress's SOC team collaborates with us is significantly better than other solutions.

There are a few key aspects of Huntress that we appreciate. What stands out most is their human element: when faced with an unknown threat, real people, not just automated processes, are investigating it, and they're people we trust. Their security team is excellent; they proactively contacted vulnerable partners during the Exchange vulnerability a couple of years ago, urging them to apply fixes. They also adapt to customer needs, continuously developing new products and features, such as their upcoming SIEM product, and expanding upon their existing platform. Ultimately, while their software and product are great, what we value most is their company culture - they are incredibly easy to work with.

Huntress has a cyber education platform, but it lacks all the languages we need. Since we support customers in different countries, expanding the language options for their training would be beneficial.

I have been using Huntress Managed EDR for approximately four to five years.

Huntress Managed EDR is stable. We have not experienced any issues with lagging, crashing, or downtime.

We have never encountered any issues with Huntress being scalable.

Our team on the security side has contacted Huntress support, and they have been pleased.

Positive

We used SentinelOne before switching to Huntress. The main reasons for switching were the lower cost and that Huntress is fully managed.

The initial setup of Huntress Managed EDR was easy.

The deployment typically requires only one person.

Huntress has a favourable pricing structure, and I appreciate the cost-effectiveness compared to previous solutions.

I rate Huntress Managed EDR a ten out of ten.

We use other security products in conjunction with Huntress Managed EDR.

Occasional maintenance is required for agents that lose connection and to manage unidentified threats.

Huntress is one of our favourite products. It's easy to deploy for new users; they simply push out the agent. The ability to filter low-severity threats and automate their remediation can save valuable time.

We are using it as an MDR, EDR, antivirus product. We are also utilizing their Microsoft 365 ITDR, which is the new name, and their security awareness training platform. The only product they offer that we do not use currently is their SIM tool. It is on our radar and our roadmap, but we are not using it.

Their SOC is super responsive and does a great job of catching incidences and being on top of any issues that arise. They have an automated remediation tool that works well for both ITDR and EDR. It allows approval of remediations, performs all the necessary steps, verifies them, and resolves issues efficiently.

The ITDR product is coming along great, however, we are still getting many false positives. A lot of user accounts get locked out over nonissues, and while they are easy to resolve, someone still needs to take action. It is time spent by a technician.

I have been using it for a little over two and a half years, coming up on three years.

I have never had a problem that was Huntress's fault.

It is pretty scalable. I am currently running a little over twenty-five hundred endpoints without any problems or concerns about managing that number of computers.

If I contact support, it is almost immediate. They respond quickly and work with me until the problem is fully resolved. They are thorough and ensure the problem is addressed without pushing responsibilities onto me unnecessarily.

Neutral

Previously, we used SentinelOne, Webroot, and BlackPoint. I switched since I have tested SentinelOne multiple times and could bypass it. BlackPoint generates many false positives, taking more time to manage than Huntress.

The initial setup process was smooth. We were provided with an engineer who wrote a script based on our current structure and remote management software. This script allowed easy deployment, and Huntress's support ensured everything went smoothly.

We were given an engineer who sat down with us, understood our current setup, wrote a script for deployment, and did all the backend work necessary for a smooth deployment.

The pricing is piecemeal, per agent on EDR, MDR, and per user on ITDR. It can get expensive for small to medium businesses if large license quantities are not purchased. However, given Huntress's success rate, I am willing to pay for a product that performs well.

The alternatives I have used include SentinelOne, Webroot, and BlackPoint.

I rate Huntress an eight out of ten. I prefer using it over other security tools because it has been reliable and efficient in catching incidents and isolating threats quickly.

I have been using Huntress Managed EDR for approximately one year. I primarily use Huntress Managed EDR for threat detection and response, including continuous monitoring of endpoints for malicious activity, detection of malware and ransomware, identification of persistent machines, and receiving 24/7 managed threat hunting from Huntress security analysts that help me quickly investigate suspicious behavior and provide clear remediation.

One full example I can share is when Huntress detected suspicious persistence activity on an endpoint and identified an unusual scheduled task that had been created and flagged it for investigation. The Huntress team provided context about why the activity was suspicious along with clear remediation steps that made it much easier for my team to validate the alert, remove the persistent mechanism, and ensure the endpoint was clean. Having both the analyst's guidance helped me respond much faster than if I had investigated entirely on my own.

Huntress has become my daily monitoring workflow. I review the Huntress alerts, investigate suspicious activity, and follow the remediation guidance whenever needed. It complements my existing security tools and helps me detect and respond to endpoint threats more efficiently.

I believe Huntress takes a balanced approach by combining AI with human analyst validation that improves detection quality while reducing false positives. It provides greater confidence in alerts compared to relying solely on AI.

Based on my experience, Huntress Managed EDR's AI capabilities are accurate and reliable in identifying suspicious behavior, helping me prioritize potential threats. What I appreciate is that Huntress does not rely solely on AI detection and has security analysts review and validate alerts before being escalated. This combination improves the quality of alerts and reduces false positives, giving me greater confidence in the results. Overall, I find the output consistent and dependable for day-to-day security operations.

The best features Huntress Managed EDR offers include managed threat detection, analyst-validated alerts, behavior detection, ransomware protection, persistent detection, and clear remediation guidance. Together, it helps me detect and respond to threats while reducing false positives. I would say the managed detection analyst support is the standout feature for me, as having a security expert review suspicious activity and provide clear remediation steps gives me confidence that I am focusing on genuine threats rather than spending time investigating unnecessary alerts.

The analyst validation has most improved my work efficiency. Instead of investigating every alert from scratch, I receive alerts that have already been reviewed by Huntress security analysts who provide context on why the activity is suspicious, assess its potential impact, and give recommendations and remediation steps. This helps me identify genuine threats and reduce the time spent on false positives. My team can then focus on higher priority security tasks. Overall, it has improved my incident response process and increased my confidence when responding to security events.

Huntress Managed EDR has added value to my security stack. The combination of managed threat detection analysts, validated alerts, behavior detection, and clear remediation guidance helps me improve my security operations and incident response. Overall, I have a positive experience with the platform.

Huntress Managed EDR has positively impacted my organization by improving visibility of endpoint threats and strengthening my incident process. Since the implementation, I have been able to detect suspicious activity more quickly, prioritize real threats through analyst-validated alerts, and reduce the time spent investigating false positives. The platform's recommendations and guidance also help my team respond to incidents more effectively. Overall, it has improved my endpoint security, reduced alert fatigue, and increased confidence in my daily security operations.

I do not track specific metrics that I can share publicly, but I have identified operational improvements. My analysts spend less time investigating false positives because Huntress provides analyst-validated alerts and detailed context that help me prioritize genuine threats more quickly and improve my overall response time. I have also gained better visibility into endpoint activity and more confidence when responding to security incidents.

Overall, I will say it has been a reliable solution. I have not encountered any major issues. If I had to suggest an improvement, I would like to see a customizable dashboard and reporting along with additional integrations with third-party SIEM or SOAR platforms. More advanced policies to customize automation options would also be beneficial for larger enterprise environments. These have been discussed as announcements rather than major gaps. Overall, I have a positive experience with the platform.

I will say there is always room for improvement, such as a dashboard or enhancing reports. I will also say that there should be updates every day because I work in cybersecurity, and some things can crash or face zero-day vulnerabilities. Things can get messy, so I think adding something would be beneficial because of that.

I have been working in my current field for three or more years.

Huntress Managed EDR has been a stable and reliable solution. I have not experienced major stability issues, and it consistently performs well in my environment.

The scalability of the environment is straightforward, with adding endpoints and managing them from a centralized management console. It is easy to monitor and manage as the environment grows. From my experience, the platform handles operational needs without significant scalability issues.

I previously relied on traditional antivirus endpoints, and I switched to Huntress Managed EDR to gain stronger endpoint detection and response capabilities, manage threat hunting, and have analysts validate alerts, which improves visibility and response to advanced threats.

I do not have specific ROI metrics, but I have seen operational benefits such as faster investigations, reduced alert fatigue, and more efficient incident responses. I also believe I do not require too many people to work, which helps.

I was not personally involved in the evaluation, but my organization commonly compares Huntress Managed EDR with solutions such as Microsoft Defender, CrowdStrike, SentinelOne, and Sophos before making decisions. I cannot confirm if anyone else in my organization evaluated them.

I will say it is very easy to work with because it is very user-friendly. I would not call it basic; the overview is friendly for analysis and helps in observing any difficulties.

I will say it is a very good tool for the SMB market. I can have everything in one place, and it is easy to work with and track investigations through AI and also by human touch. Things have been under security pressure, and it will be good for organizations.

For example, I work in general shifts, so sometimes people are not there or are sick. In case any critical or crucial alerts come in, such as a zero-day or something ransomware-related, Huntress helps me identify those alerts, which is very beneficial for me.

It helps reduce low-severity alerts and SOC fatigue. It also enables me to conduct proper analyses efficiently. What I can say is that it is very good; I cannot say it in better words.

I do not require that because I believe L1s are initiated, and L2s are adequate to work. The SOC manager's workload is enough to manage it.

I cannot provide a proper example because it is related specifically to my organization, but the product is good for me and helps make my organization stronger from a defensive standpoint. It makes it worth having this tool.

Once I deployed Huntress, I started seeing benefits in the first few weeks. After onboarding the endpoints to the platform, I gained visibility in my environment and began receiving meaningful analyst validation of alerts, which provided better insight into endpoint activity. Overall, the following months saw noticeable improvements in my incident response process, making it more efficient and allowing me to prioritize genuine threats effectively.

I have not been directly involved in purchasing or licensing processes, so I cannot comment on exact pricing setups. However, from an operational perspective, the development and onboarding are straightforward. The license process seems to be managed by my IT and procurement teams. Based on my experience using the platform, I believe it provides good value because of its managed detection capabilities and analyst support.

I recommend using Huntress Managed EDR if you are looking for a managed endpoint detection and response solution. Ensure proper onboarding to take full advantage of analyst support and validated alerts and remediation guidance. It provides strong visibility into endpoints and threats and improves incident response. I would rate this product a nine out of ten.

We use it for our clients and ourselves. Huntress is a pretty comprehensive platform. Recently, they acquired the security awareness training platform, which helps us to fulfill our clients' needs regarding security. It has been pretty good. A lot of our clients are growing in this area. Traditionally, we have been using it for endpoint protection, which has been effective in many situations.

It is positioned very well for the SMB market. The most recent understanding that I have is that they are providing more visibility in the market. People are now seeing it as a product for security for many different reasons. The program is easy to use and easy for administrators as well. When it comes to security, it is similar to all the other players in town. Everybody says that they are an all-in-one sort of solution. From my perspective, Huntress is in the MSP space more than some of the bigger players such as CrowdStrike, and they are more successful because it is more MSP friendly. There is a lot of uptake on the growth of the product in general. CrowdStrike, for example, is a very mature product in the security marketplace, so they may or may not need to engage as closely as Huntress. Huntress also educates the group of people who use their product more than others, and that helps to deliver value through all the partners who are selling their product.

The endpoint protection is solid. One of the easiest things for us to do is to deploy the agent. It does not matter whether the client is infected or not infected. As soon as Huntress is deployed, it is good. It is easy for us to manage from our end. It tells us exactly what we need to see. It caught things that we could not catch with the traditional antivirus program. We have a way to tell clients that we have given them the greatest endpoint protection ever made, and it caught a few more virus programs. Would they like the deployment for the rest of their company? Most of the time, that is an easy sell on our end.

It has been making our lives so much easier. In the past, we had to spend hours and hours trying to look for the threat, whereas now, we can just put Huntress to immediately find out the threat and what needs to be done. Sometimes, some of the automatic remediations just happen without us even knowing, and we learn about it afterward. We also needed it because of the growing need for cybersecurity insurance compliance in Canada.

We use Huntress' ability to automatically remediate low-severity threats. 

It is integrated with Microsoft Defender. Once we have sold the Defender suite to a client, we integrate that with Huntress. Huntress is the EDR and also the MDR portion to manage any sort of alerts that arise.

Huntress has helped reduce the need for expensive security tools or to hire expensive security analysts. Our techs may or may not need to have a very high level of skills. We are also using Huntress as a tool to help us to answer some of the questions. It empowers the techs, and at the same time, we are spending less money.

Huntress has improved our security dramatically. Especially seeing that there is a growing need in the security space, we wanted to make sure that we have a good partner to work with.

The endpoint protection is definitely the most impactful feature for clients.

It just works. It is a set-it-and-forget-it type of solution.

There should be more engagement with the MSP group or their largest clients. They should have focus group discussions on what they can do to improve the product. A more transparent way for the support team at Huntress and our IT team to collaborate to make it faster and easier would be beneficial. It does not mean that the current support team is not doing its job, but if you look at the marketplace, the selling point of one of the competitors Blackpoint Cyber is a more cohesive work-as-a-team approach when it comes to support. I have heard that other MSP businesses using Blackpoint find it to be a much better experience in comparison to Huntress. While we are happy with Huntress, that is one area that everybody is saying can be improved.

I have used the solution for about a good four years.

I have not experienced any lagging, crashing, or downtime. Adding the load on the endpoints, like any security solution, makes the system slower, but we explain that to the client beforehand.

It is pretty easy to use.

We did not use any solution previously. 

It is working for us, so we do not want to change.

It is a cloud solution. The initial setup is relatively easy. It probably took a couple of hours per client, and all deployments were done.

The implementation is a one-person effort.

I would advise talking to them and engaging with the team. Figure out what is needed to support clients. Huntress is not for everyone. Understand different clients' requirements, and do not be thrown off by regulatory changes. We are a Canadian MSP business, specifically legal. We know the business needs well. You need to know what you need. Hunt for it. Huntress works for us but may not for everyone. 

Overall, I would rate it a nine out of ten.

We use Huntress' EDR tools, security operation center back end, security awareness training, and Microsoft Defender. 

It's a small installation that doesn't require a high-powered desktop, laptop, or server. It can be put on anything, and within a few minutes, they get a notification that the software has been installed on that machine. Huntress will immediately set up what they set up on their back end to watch that 24/7.

The benefits of Huntress are the resources that we have within the team. They're responsive. We have a dedicated customer rep with whom we work. He calls us consistently with new business they have going on within the company. Their communication level is second to none. It's important that they're within the same state, so it's like a local thing for us because we cover the tristate areas.

It has helped us eliminate more expensive security tools and take care of our whole security department. We only need to implement that resource, so we've reduced our security stack. They're in the top 10 percent of their area of expertise, and we've had zero concerns with that.

The EDR tools are the most beneficial. We protect all our clients' endpoints through their security operation center, which runs through the EDR. We like that it's a small installation that doesn't take up much processing space, and we can quickly install it on our machines. We push out the agents automatically and get everybody up and running quickly.

We go into the portal and see all our endpoints. We can see the alerts and events in real time. If anything major comes up, they email us a rundown of the issue, where it exists, where the file is, and what the file structure looks like. We can do a one-button remediation so they can take care of it.

They just released a new feature called unwanted access that we have taken advantage of. We've encountered a few issues with outside hackers and scammers trying to get into certain clients' emails and workstations. These issues were immediately remediated and resolved before they became a problem for the customer. We were also able to identify a VPN connecting from outside once we put the source on their computer, and we were able to shut that down within five minutes.

The existing features are perfect. However, I think they could add a more robust set of security features like dark web scanning, penetration testing, and risk assessment for clients. We would have one tool for everything. We wouldn't have to go to multiple vendors to pull something together. That would be more beneficial for us.

We have used Huntress since November 2023.

We haven't had any crashes with Huntress. Bitdefender crashed two of our networks, and contacting support to know what ports to open was difficult. With this, it's installed, and it's good. I've never had a problem with performance issues or their Defender crashing.

Huntress' ability to scale is fantastic. We have an opportunity with a major company with 20,000 endpoints that will possibly be finalized next year. They told us they're more than willing to bring us on as a reseller so we can make some money from that and manage all those endpoints while reducing our price per endpoint so we can make some extra profit on that.

I rate Huntress support nine out of 10. We've had two breaches unrelated to Huntress, which wasn't watching those devices. Even though they weren't watching the device, they were very responsive and helped us get a list of things to start checking off. They could get back access to everything they needed on their side. That was with both cases that we've seen.

Positive

We were using ConnectWise, Bitdefender EDR, and SentinelOne. After working with Huntress for a while, we could see the benefit of human-managed resources versus AI algorithms running everything on the security side. 

We still take advantage of proactive solutions like AI, but not on the security side. Too many obstacles can get in the way of human interaction, which can catch stuff that machines or AI will not see. We dropped their contracts back in May. They were very unresponsive. We had a lot of issues across several months. They're no longer in our stack.

We have automations that we run within our agent that can push out Huntress automatically, or we have it on a flash drive that we install on a computer if we need it for clients that aren't fully managed services with us.

It's incredibly easy because it's a small download. You only need to input your account key and name it something that shows up in the portal under a certain name. It's installed in under 10 seconds.

We haven't had any problems with Huntress' pricing. We're at 250 workstations, and we've grown considerably this year. They've been able to handle everything that we've thrown at them within that time frame. They're also  reducing the price based on how many endpoints we add.

We looked at a couple of other things. They weren't what we sought, and the price was too high. A few different distributors were trying to push some different solutions on us. Still, I had researched enough to feel that a call with Huntress would be beneficial. They called me immediately, which I had not gotten from some of the other people. We looked at SilverSky and Arctic Wolf. Both sales teams were unresponsive. It made the decision to go with Huntress easier.

We tried combining SentinelOne with Huntress. One of the reps at Huntress told us they have Defender, which Microsoft constantly updates, so they can manage everything on the back end, open ports and know what to watch. SentinelOne provides an extra level of security, but it doesn't accomplish beyond what Huntress is doing. We could save several hundred dollars by not having that on there any longer.

I rate Huntress 10 out of 10. Do your homework and make sure you understand exactly what you're getting into with any solution. Huntress' staff is incredibly friendly and supportive. They will make the transition easy for you. You have to price accordingly to profit from what you're marketing to your customer base

We use Huntress to monitor our internal and customer systems for security vulnerabilities.

We chose Huntress for its 24/7 managed detection and response services.

Huntress is deployed entirely in the cloud. We use the Huntress portal to manage it and our RMM tool to distribute the agent to our devices.

Huntress is a great option for the SMB market. It's competitively priced and offers good value for the money, making it one of the most cost-effective security solutions available. Its team is highly qualified and delivers a quality product at a price point that fits the SMB budget. Enterprise tools can often be overly complex or expensive, and Huntress effectively addresses both of these concerns.

It's extremely easy overall. We deploy the agent and it takes care of the rest.

Huntress enhances visibility into endpoint activity by monitoring running processes. It employs a 24/7 human response team to analyze alerts from both the Huntress agent and Windows Defender Endpoint Protection. This team can then choose to isolate suspicious activity and limit its impact if deemed malicious, or escalate the case for further investigation.

Some endpoint protection solutions may miss early warning signs of suspicious activity, such as unusual system behavior or potential footholds for attackers. This is often the case when deploying such solutions to new customers. However, it's important to remember that malicious activity doesn't happen every day in every environment. So, for some customers, its value might not be immediately apparent. It might take a few years before a serious incident occurs, highlighting the need for Huntress' detection and response capabilities. Therefore, the timeframe to see the benefits of Huntress can vary greatly.

The fully managed service has certainly reduced the effort needed for handling alerts from endpoint protection solutions like Windows Defender. Eliminating the need to deal with false positives has been a significant benefit, greatly reducing our team's workload. Additionally, the SOC within the service effectively handles after-hours issues, minimizing the impact on our on-call staff.

Instead of relying on expensive endpoint protection software, we successfully leveraged the built-in Windows Defender in conjunction with the Huntress agent. This combination, in our opinion, represents a significant improvement over using a potentially more robust but costly solution alone. The key advantage lies in the added human element: Huntress' 24/7 monitoring and endpoint isolation capabilities. This approach has demonstrably improved our security posture. However, it's unclear whether it fully eliminates the need for a high-cost security analyst. While Huntress certainly reduces expenses associated with lower-level resources tasked with the initial triage of false positive alerts, its impact on the role of a specialized security analyst remains to be determined.

It has improved our overall security significantly. It adds another valuable layer of protection and provides greater visibility into endpoint activity. Perhaps the most significant benefit for us is the true 24/7 coverage. While our staff has extended hours, there's a gap overnight when no one is actively monitoring for security incidents. When time is of the essence, as it often is in cyber situations, having someone from Huntress available to instantly respond by isolating threats is invaluable. This service is certainly more cost-effective than attempting to staff our team for round-the-clock coverage.

Our security started improving immediately after deployment. It began searching for pre-existing footholds or remnants of other malware that may not have been fully cleaned up from previous infections. The 24/7 SOC provided instant benefits—knowing we had that extra layer of protection with dedicated experts watching our systems was a reassuring feeling.

The most valuable aspect of Huntress is its 24/7 SOC service. If something suspicious is seen on an endpoint, even in the middle of the night, there is always someone available to react quickly and isolate the endpoint to mitigate the potential spread to others. 

Huntress' Process Insights feature could benefit from more robust search and filtering capabilities. Currently, it's quite basic, offering only a single search bar with limited granularity. Additionally, the data retention period is short, with access restricted to three days. While the SOC team can export a week's worth of data, extending this period to at least thirty days would be highly beneficial.

Overall, we're generally satisfied with the solution. However, deeper integration with other endpoint protection platforms would be valuable. Ideally, Huntress should be able to ingest alerts from systems like CrowdStrike and conduct investigations similar to CrowdStrike's offerings. This would be particularly useful for us as a CrowdStrike partner.

I have been using Huntress for three years.

Last week, we encountered an issue with the Huntress agent. Essentially, there are two components: the core Huntress agent and the Rio agent, added later about a year into our partnership for process insights. While Rio is valuable, we experienced a communication gap regarding its functionality.

If Rio shut down for any reason e.g., computer reboot, or agent update, it wouldn't restart properly, creating a blind spot for the Hunter team as no data was transmitted. This issue emerged within the past two weeks and took a few days for Huntress to identify and resolve.

Overall, the platform is generally stable, but we've faced some bumps in the road. One issue involved unclear communication about agent check-ins, and the other was the recent Rio shutdown problem.

Huntress scales very well. We've grown from approximately 9,000 to 17,000 endpoints, and I haven't encountered any scalability issues.

We're generally very pleased with the technical support. They respond promptly via chat, and if the frontline team can't resolve an issue, they escalate it swiftly. In one instance, their SOC analysts even helped us investigate malicious activity at our endpoints, something that deeply concerned us and our customers. In that situation, they truly went above and beyond to assist us.

Positive

We previously used Webroot, but it was ineffective at stopping the latest ransomware threats. That was the main reason we switched to Huntress. We replaced Webroot with the built-in Windows Defender plus the Huntress agent, and together they proved significantly more effective at stopping those threats than Webroot alone.

The initial deployment was smooth. However, we realized a gap in our internal processes and understanding of how to respond to different alert levels.

Our deployment was rushed due to signing the agreement during the Log4J vulnerability outbreak around Christmas 2020. The widespread threat forced us to prioritize deploying the Huntress agent quickly instead of following a slower, more deliberate approach to replacing Webroot.

Fortunately, the Huntress agent seamlessly integrates with other endpoint protection solutions. This allowed deployment without disrupting existing protection or leaving us vulnerable during the transition.

The additional 24/7 SOC visibility without replacing our current endpoint protection has been immensely valuable. While deployment was simple, we identified the need to refine internal processes and response protocols for different alert levels.

We had a small team, perhaps two or three people, working on the deployment. In all honesty, it could have been done by a single person. Our deployment process is streamlined, and we have a large customer base. As a mid-sized MSP with over two hundred customers at the time, we had the manpower to spare. However, thanks to scripting and RMM tools, even a single individual could theoretically deploy Huntress to a large number of endpoints with ease.

Being an MSP, we implemented the solution internally.

Huntress is priced fairly for the services and value it provides.

I would rate Huntress nine out of ten.

Our team occasionally uses the automatic remediation feature for low-severity threats, but we don't heavily rely on it. When it comes to endpoint protection alerts, we prefer a more hands-on approach. Despite using automatic remediation to some extent, the feature's impact on our workload has been minimal.

The biggest maintenance challenge with Huntress is the potential for certain firewalls, especially Fortinet models depending on their enabled features, to block communication from the agent on the endpoint back to the Huntress portal. This blockage isn't apparent from the endpoint itself. While the Huntress page might appear installed and running, the agent might have only checked in initially and stopped sending data. After a month of inactivity, Huntress removes the agent to prevent the portal from becoming overloaded with inactive agents. This creates blind spots in our monitoring, as we remain unaware of the missing data. Addressing this challenge has been difficult, as we rely on our RMM tool for endpoint management and strive to maintain a consistent active list. Continuously comparing this list with the Huntress portal to ensure they match has proven frustrating.

When using Huntress the most crucial aspect is training our internal staff on how to respond to different alert levels. These levels typically fall into three categories: low, high, and critical. It's essential to have a clear action plan or standard operating procedure outlining how our team should handle each alert type. Additionally, basic training on the Huntress portal is recommended. The portal has various pages, modules, and tabs, so familiarizing our staff with navigating and interacting with it is crucial. This includes skills like isolating endpoints, removing isolation if necessary, and utilizing provided remediation tasks or manual remediation if preferred. Implementing these measures will significantly improve our incident response capability.

Huntress is one of our security layers. We also use Webroot for antivirus and SentinelOne. Huntress is particularly valuable because when we first implemented it, we discovered several potential issues with our PCs that we were able to address quickly. More recently, it has allowed us to be notified immediately if something bad is happening.

We implemented Huntress to improve our security posture.

Last weekend, we experienced a potential breach prevented by Huntress' automated response. It involved the general manager at a car dealership who was unaware of an ongoing penetration test. This caused confusion until we contacted someone knowledgeable about the situation, allowing us to restore normalcy. This incident highlights the potential for serious consequences had the breach not been prevented.

Huntress is easy to use. The portal is transparent, and the manual or automatic remediation recommendations are well-defined.

It is a valuable addition to the SMB market. It is affordable and powerful.

Since we started using Huntress, things have become more automated. One valuable feature they recently introduced is a test mode, which allows us to gauge our response to a simulated emergency without triggering an actual alert.

Huntress' 24/7 monitoring is helpful. While it will alert us at all times, the alerts are usually important. The only low priority item is password alerting. When Huntress finds files that might have clear text passwords, it's not a high risk, but it's still good to inform the client about potential security issues.

The auto-remediation capabilities are excellent because they allow for a set it and forget it approach, or users can simply revisit the portal to verify that everything is as expected.

Huntress has helped reduce the need for expensive security tools and the hiring of security analysts. This can lead to savings equivalent to the cost of two security analysts, which is approximately $200,000 per year.

Huntress has improved our security. It generally doesn't interfere with our other tools, as sometimes our antivirus or some of the other tools tend to flag legitimate activities.

We have integrated Huntress with Webroot and SentinelOne. They each play a role in the security posture.

We noticed an improvement in our security within a few weeks. Of course, there were many things to handle, especially when rolling it out at a new location. We tend to clean up a little bit initially, which increases our workload slightly. But once we get through that initial phase, everything runs smoothly.

Huntress has saved us 20 percent in resources.

The most valuable aspect of Huntress is its ability to isolate legacy systems from the network, preventing the spread of threats. The automated remediation feature also provides significant value.

Huntress excels at explaining threats when they are presented in clear language. However, the sheer volume of threats and occasional ambiguity in remediation steps can make comprehensive tracking challenging. Ultimately, the clarity of their alerts is paramount for effective threat communication and could benefit from clearer remediation steps.

I have been using Huntress for four years.

I would rate the stability of Huntress nine out of ten.

I would rate the scalability of Huntress eight out of ten.

The initial deployment was done using a script, taking one day. We integrate it with ConnectWise to push scripts out to PCs and monitor the deployment to ensure continuous operation and services running. We receive alerts for this, making it maintenance-heavy but ultimately worthwhile.

Our deployment strategy was straightforward: set up the company, then implement and activate the scripts. I'm not heavily involved in deployments, but I've written a few scripts. When issues arise, like when our tool ThreatLocker halts a deployment, I step in to troubleshoot and resolve the problem.

Any prevention or early detection of an attack, like catching a cold before it spreads, will lead to significant savings in time, investment, and reputation. If we, as the Managed Service Provider, experience an exploit, it will negatively impact our reputation. Therefore, safeguarding our reputation is the best form of seeing a return on investment.

I would rate Huntress nine out of ten. The services tend to stop, so we have a small script that restarts them. I don't know if there's a way they can make their service more resilient. That would reduce our maintenance burden.

We have 20 people that use Huntress in our organization.

We use Huntress on almost 25,000 devices.

Huntress requires minimal maintenance.

I would recommend Huntress to others. It lets you know about real-world attacks happening in near real-time. A couple of years ago, I remember Huntress alerted us about a laptop stolen at an airport, and we were able to isolate that laptop. It was eventually returned to the company, and they just had to call us to let us know. You can also turn off isolation, so it's not just a security feature, but it's almost like having LoJack for your laptop.