Huntress Managed SIEM Reviews

My main use case for Huntress Managed SIEM is working with partners who will then be able to deliver the customer needs to the end user. I work with enabling partners and discuss security information and SIEM solutions as a whole along with different vendors such as Exabeam, Huntress, Splunk, and Sentinel.

I primarily use Huntress Managed SIEM to help our partners deliver it to the customers, providing intelligent data filtering and real-time detection. The solution collects logs, gathers data, and ensures that partners can collect logs, detect threats, and investigate them.

Huntress Managed SIEM is designed to make powerful threat response and compliance support accessible without complexities. It is a very simple solution to use, especially compared to the cost associated with a traditional SIEM. The feature of intelligent data filtering stands out significantly.

One of the best features Huntress Managed SIEM offers is how simple it is to set up. The alerts are filtered so I do not get tons of alerts and unnecessary noise. Low expertise is needed because traditional SIEMs normally require quite high knowledge and expertise. Huntress Managed SIEM includes human analysis, so it is not all aided by AI.

Huntress Managed SIEM combines machine detection with human investigation, which adds context and helps confirm if something is actually a threat rather than just noise. This provides a real-life comparison of who is affected, how it happened, if it is spreading, and how bad it is, along with clear actions that can be taken, such as isolating a machine, enabling MFA, resetting the password, or completely killing the process. Without humans, everything looks urgent, but with them, it provides real-time, real risk escalation which prevents alert fatigue. The ROI of human analysis lies in time saved; I am not doing a deep investigation or log digging for an hour, allowing for fast incident response.

The confidence aspect provided by Huntress Managed SIEM is significant because it prevents costly mistakes and breaches. The massive reduction in downtime gives people confidence knowing they will not lose money due to easily avoidable problems. Additionally, I do not incur high costs for numerous SOC analysts when I can use Huntress Managed SIEM, which replaces costly security overheads. Those are major points of ROI that help ensure confidence, not only regarding financial aspects but also compliance benefits through audit logs, security reporting, and satisfying cyber insurance requirements.

I believe Huntress Managed SIEM could be improved by increasing integrations with non-Microsoft solutions as this would broaden its appeal. A broader out-of-the-box solution for diverse environments including IoT, Mac OS, and Linux servers would be valuable.

I would rate Huntress Managed SIEM an eight because a couple of things could be changed, such as having more integrations with non-Microsoft systems, improved customization on the dashboard, and enhanced reporting in the threat intelligence updates. Being unable to click on new niche variants of threats is another point I would mention, but overall an eight out of ten is a good score because I think it is a very well-priced solution for its capabilities and all the positives I have outlined.

The eight rating is primarily influenced by those integration and customization points I mentioned, which are the main requests from customers.

I have been using Huntress Managed SIEM for about twelve months, and I have eighteen months of selling SIEM experience.

Huntress Managed SIEM is very stable, which I consider a major positive. I can rely on its capacity to deliver true detections without a lot of noise, which forms a big part of why I think it is an excellent solution.

Huntress Managed SIEM performs well regarding scalability, as does any other SIEM solution. The level of expertise needed is quite low, making scalability really good. It is designed for small to medium businesses; however, the challenge arises in enterprise settings. The scalability for SMEs and MSPs is noteworthy for a few hundred endpoints, but it struggles with scalability when dealing with high logs, multi-site, multi-tenant setups, and large volumes of endpoints, which poses a challenge.

Customer support through our channel partners is excellent. They have a great team, and the CSMs are really good. They operate a solid channel model within the UK channel.

I have previously used various different solutions, including Exabeam, and looked into others such as Splunk.

The pricing, setup cost, and licensing for Huntress Managed SIEM are quite good, averaging around £20 to £40, though this is variable. However, it pays for itself by avoiding breaches, reducing downtime, and eliminating the need to pay for highly expert SOC analysts, which can cost over £100,000.

Huntress Managed SIEM has positively impacted my organization by providing several ROIs. First, the cost is typically £20 to £50 per endpoint per month, although this varies. Avoiding one breach can save in excess of £50,000 to £200,000. The reduction in downtime can exceed £10,000 plus, and it also avoids the need to hire SOC staff, which can cost over £100,000. I can expect an estimated five to twenty times return on investment with this solution.

Beyond the money, the real ROI is the confidence during incidents, knowing what has actually happened instead of what could be happening. I can make fast decisions without guessing, aided by human support, and sleep at night knowing that alerts have been actioned and are legitimate.

While I do not have the exact numbers myself, I acknowledge that any breach can range from £10,000 to over £100,000, with average downtime per day costing tens of thousands. Huntress Managed SIEM eradicates these losses and provides a complete return on investment by preventing downtime and breaches, ensuring no money is lost.

Before choosing Huntress Managed SIEM, I evaluated other options such as Splunk, Exabeam, and Sentinel, among others.

My advice for others looking into using Huntress Managed SIEM is to research and compare it with other SIEM solutions. If I am a small to medium enterprise that wants to avoid spending a lot and minimize the risk of breaches while receiving alerts without excessive noise, this is a good solution.

Huntress Managed SIEM is a great solution overall. To summarize, Huntress Managed SIEM is a security solution that offers event management designed to make powerful threat detection, response, and compliance support accessible without the complexities and costs of traditional SIEMs. It delivers real-time detection, operates a twenty-four/seven AI-assisted SOC center, ensures effective threat management, and allows data retention for compliance needs from one up to seven years. It is well-priced and provides significant value.

The importance of Huntress Managed SIEM offering security and compliance solutions without complexity is paramount for my organization as it fulfills the requirement for compliance to enlist logs that continuously check my infrastructure with SIEM and exposure management. Having this in place ensures I can prove I am actively monitoring, protecting, and recording security effectively while showing compliance. Most environments require log collection, monitoring, incident detection, and that is exactly what Huntress Managed SIEM does.

The time to see actionable detections after deploying Huntress Managed SIEM is quite good; it has a quick time to value. Implementing it does not require extensive expertise to run Huntress Managed SIEM within my infrastructure, which is a positive, and I can see the threat detection via logs very quickly, making the time to value really fast.

I assess the visibility provided by Huntress Managed SIEM on the same day of deployment as very easy. Once I start enrolling and using it, the logs are clear to find. The setup is simple, and the alerts are well-filtered, so I do not experience alert noise and fatigue. Being able to use that as a time to value, along with low expertise needed, is a really good point.

I would assess Huntress Managed SIEM's enhanced correlation and detection coverage in identifying potential threats earlier in the attack life cycle as quite high quality. The only negative is that niche or newer threat variants with failed alerts are not picked up as much, which is probably why I would categorize it as a con.

My experience with the behavioral analytics feature in Huntress Managed SIEM reflects that this is a con, as I feel the competitor Exabeam performs this to a greater degree.

I rate Huntress Managed SIEM an eight out of ten overall.

Huntress Managed SIEM serves as my centralized security monitoring and threat detection tool. We use it to collect and review security events, identify suspicious activity, and help the security team prioritize issues that require investigation without having to manually monitor logs all day.

One specific example of how I've used Huntress Managed SIEM for centralized security monitoring and threat detection involved unusual authentication activity from a user account. Huntress helped surface the related security events, which gave our team a clearer picture of the login activity and allowed us to investigate whether the account had been compromised. We reviewed the activity, validated the user and source, and then took the appropriate steps to secure the account. The main benefit was having the relevant events brought together so the team could investigate the issue without manually going through large amounts of data.

Another incident exemplifies how Huntress Managed SIEM fits into my security operations. Our main use is security operations, particularly centralized security monitoring, threat detection, and incident investigation. We use Huntress Managed SIEM to bring security events together, identify suspicious activities, investigate potential threats, and help the team prioritize incidents that need attention. It also helps reduce the manual effort involved in reviewing logs and gives the security team better visibility across the environment.

The best features Huntress Managed SIEM offers in my experience are the centralized security event monitoring, threat, and managed investigation capabilities. The ability to bring security data together and have suspicious activity highlighted helps reduce the amount of manual log analysis for the security team. I also appreciate the incident visibility and investigation workflow since it makes it easier to understand what happened, prioritize the issue, and take action. The managed approach is probably the biggest advantage because it adds security expertise without requiring the team to constantly monitor everything themselves.

Huntress Managed SIEM has had the biggest positive impact on my organization by reducing the amount of manual effort required from the security team. Instead of spending as much time going through large volumes of security events, the team can focus more on investigating the alerted activities that actually require attention. It also has improved visibility into security activity and made incident investigation more structured. Overall, it has helped us respond to potential issues more efficiently and given the team more confidence in our day-to-day security operations.

We have seen a noticeable reduction in the amount of time spent manually reviewing security events and investigating low-priority alerts as a result of Huntress Managed SIEM implementation. The team is able to identify and prioritize relevant security activities faster, which has improved the overall incident investigation workflow. While we do not track a single metric for every outcome, the biggest improvement has been analytical efficiency and better visibility into security events, allowing the team to spend more time on higher-value security tasks. The team has been able to save roughly one or two hours per analyst each week that would otherwise be spent reviewing and sorting through security events manually. It has also reduced the time needed to get initial context around an alert, since the relevant activity is easier to review in one place. The bigger improvement has been reducing repetitive investigation work and allowing the team to spend more time on higher-priority security issues.

Areas where Huntress Managed SIEM could improve include automated alert triage, events, threat intelligence context, endpoint visibility, detection and response workflows, log correlation, incident timeliness, integration with existing security tools, and reduced alert fatigue.

One area where Huntress Managed SIEM could improve is customization. More flexibility around dashboards, reporting, alert tuning, and detection rules would be useful for teams with more specialized security requirements. I would also appreciate the continued expansion of integrations with third-party security and infrastructure tools. Improving these areas would give security teams more control over how they organize and investigate the data while still keeping the managed experience simple.

Another improvement would be more granular control over alert prioritization and notification settings. It would be helpful to have more flexibility in defining what gets escalated based on our specific environment and risk profile. More detailed reporting and customizable dashboards would also make it easier to communicate trends and incident activity to different stakeholders. Continued expansion of integrations would be beneficial as well, especially for teams managing a broader security stack.

I have been using Huntress Managed SIEM for one to two years.

Huntress Managed SIEM has been stable in our day-to-day operations. We have not experienced significant reliability issues, and the service has been consistent for our security monitoring and investigation workflows. From an operational standpoint, it has been dependable enough that the team can use it as a part of our regular security monitoring without having to worry about frequent service interruptions or maintenance issues.

Huntress Managed SIEM has scaled well with our environment. As we have added more users, systems, and log sources, we were able to expand the monitoring without a major increase in administrative effort. The managed approach is particularly helpful in this regard because the security team does not have to spend a lot of time maintaining the underlying SIEM infrastructure. Huntress Managed SIEM scales well for organizations that want to grow their security monitoring without adding the same level of operational complexity.

The customer support for Huntress Managed SIEM has been good overall. When we have had questions or run into an issue, the support team has been responsive and helpful in getting us pointed in the right direction. They also provide useful guidance during troubleshooting rather than simply directing us to documentation. For a managed security platform, having responsive support is important, and our experience has been positive.

We previously used Microsoft Sentinel before adopting Huntress Managed SIEM. We switched to Huntress Managed SIEM because we were looking for a solution that required less ongoing administration and manual alert tuning. Sentinel provided strong capabilities, but managing detections, reviewing alerts, and maintaining the environment required more time from the security team. Huntress Managed SIEM offered a more managed approach, which helped reduce the operational overhead while still giving us the security visibility and detection capabilities we needed.

We started seeing useful and actionable security detections fairly quickly after deploying Huntress Managed SIEM. Once the relevant data sources were connected and the initial configuration was in place, the platform began providing security events that the team could investigate and prioritize. There was some initial tuning required to make the alerts more relevant to our environment, but overall, the time from deployment to getting useful detections was relatively short.

Visibility on the same day was good, especially once the initial data sources were connected. We were able to start seeing security events and get an initial view of activity in the environment without having to wait for a long deployment period. The visibility became more useful as additional sources were onboarded and the alerting was tuned to the environment. Overall, having actionable security information available on the first day made the deployment process feel fairly straightforward from an operational perspective.

We do not have any business relationship with the vendor other than being a customer.

We have seen a positive return on investment from Huntress Managed SIEM, mainly through time saving and reduced operational overhead. The biggest benefit has been reducing the amount of manual log review, alert triage, and routine investigation work required from the security team. Based on our day-to-day experience, we estimate roughly one to two hours per analyst per week saved on these activities. The value is not just the time saved; it also allows the team to spend more of its capacity on higher-priority security investigations and other proactive security work.

The straightforward pricing structure of Huntress Managed SIEM makes budgeting easier because we have a clearer idea of what the service will cost without having to account for too many unpredictable variables. It also makes financial planning and comparing the cost against security solutions simpler. From an operational standpoint, having more predictable costs helps us plan future security investments and reduces surprises during the budgeting cycle.

Our experience with pricing and licensing for Huntress Managed SIEM has been fairly straightforward. The setup cost was reasonable compared with the operational effort it would take to manage a similar SIEM environment internally. We also found the licensing structure relatively easy to understand, which made it simpler to estimate the overall cost and plan the budget. The main advantage for us was having predictable pricing without a lot of unexpected costs during the setup and environment.

We did evaluate other options before choosing Huntress Managed SIEM, including Microsoft Sentinel, Splunk, and other managed SIEM offerings. We compared them mainly on detection capabilities, ease of deployment, ongoing administration, integrations, and overall cost. Huntress Managed SIEM stood out because it offered a more managed approach with less operational overhead while still providing the visibility and security monitoring capabilities we were looking for.

Overall, Huntress Managed SIEM has been a positive addition to our security operations workflow. The combination of managed monitoring, useful detection capabilities, and reduced administrative effort makes it easier for the team to stay focused on security priorities. There are still areas where more customization and integrations would be helpful, but the product has provided a good balance between security visibility and operational simplicity. For teams that do not want the entire overhead of managing a traditional SIEM entirely on their own, I think it is worth considering.

I would recommend Huntress Managed SIEM to organizations that want strong security monitoring without taking on the administrative burden of managing a traditional SIEM on their own. Before securing it, I would make sure to review your current log sources, integrations, compliance requirements, and expected growth. It is also worth looking at how the managed approach fits with your existing security team and processes. Overall, if reducing operational overhead while maintaining good visibility and detection capabilities is a priority, Huntress Managed SIEM is worth considering. I would rate this solution an eight out of ten.

I use Huntress Managed SIEM to correlate events from different sources, identify suspicious activity, triage alerts, and support incident response.

One example is investigating a suspected compromised user account. I used Huntress Managed SIEM to review authentication and endpoint logs, correlate multiple failed and successful login events, check the source IP and activity timeline, and determine whether the behavior was suspicious. This helped us quickly validate the alert and escalate it for further investigation when needed.

Another use case is centralized alert monitoring and incident investigation. I also use Huntress Managed SIEM to correlate events across different sources, review activity timeline, and identify patterns that may not be obvious from a single log. It helps make day-to-day alert triage more organized and efficient.

The best features for me are centralized log visibility, smart filtering, and the twenty-four seven managed SOC support.

Another feature I appreciate is the centralized visibility and investigation capability. Having relevant logs in one place, combined with threat hunting and managed detection, makes it easier to investigate incidents and understand the activity timeline without spending too much time on manual log filtering.

Huntress Managed SIEM has helped us improve alert visibility and investigation efficiency. Centralized logs and managed detection have reduced the amount of manual log analysis, helped us prioritize important alerts faster, and made incident investigation more structured. Overall, it has allowed the team to spend more time on genuine security issues instead of routine monitoring.

It has reduced the time we spend on initial alert triage and investigation. The managed SOC and filtering help us focus on the more relevant alerts, and we have seen fewer false positives reaching our analysts. Overall, investigations are quicker, and the team can spend more time on higher-priority incidents.

The main improvement area is deeper customization. It would be helpful to have more flexibility for creating custom detection rules, dashboards, and alert workflows based on specific organizational requirements. I would also like to see more integrations and advanced investigation capabilities over time.

Another area would be improving the reporting and customization options. More detailed reports, better visibility into investigation timelines, and easier customization of alerts would make Huntress Managed SIEM even more useful for day-to-day SOC operations.

I would like to see more advanced dashboard customization, additional third-party integrations, and more granular control over alert rules and workflows. Better reporting and automation options would also make it more useful for SOC environments.

I have been using Huntress Managed SIEM for two point three years.

In my experience, Huntress Managed SIEM scales well as the environment grows. Adding more endpoints and log sources has been straightforward, and the managed architecture reduces the infrastructure and maintenance efforts on our side. The centralized log collection and smart filtering also help keep data volume and alert noise manageable as workload increases.

The support experience has been very positive. The SOC team is responsive and helpful when we need clarification on an alert or investigation. I especially appreciate that we can get direct analyst support during incidents, rather than relying on documentation or automated responses. Overall, their support has made incident investigation and escalation easier for our team.

The customer support has been very good overall. The team is responsive, knowledgeable, and helpful when we need assistance with alerts, configuration, or investigations. Having access to the managed SOC also gives us confidence that we have expert support available when needed.

We started seeing actionable detections within the first few days of deployment. Once the key log sources were connected and configured, Huntress Managed SIEM began providing useful alerts with relevant context, so there was very little delay before the platform became useful for day-to-day SOC monitoring.

On the same day of deployment, the visibility was good for the main connected log sources. We could see relevant logs and alerts fairly quickly, although complete visibility depended on configuring and onboarding all required data sources. Overall, it gave us a useful starting point for monitoring from day one.

I have seen a positive return on investment, mainly through time savings and reduced manual effort. Alert triage and initial investigations are faster, and the managed SOC support reduces the time analysts spend on routine monitoring. I do not have a precise figure for direct cost savings or headcount reduction, but the operational efficiency has been noticeable.

I would start with the most important log sources, define the key use cases, and then expand gradually. Also, make sure you understand what data you need for compliance and investigations before onboarding all sources.

Overall, I had a positive experience with Huntress Managed SIEM. The combination of twenty-four seven SOC monitoring, smart filtering, centralized visibility, and reduced tuning effort makes it easier for the team to focus on meaningful security incidents rather than managing the SIEM itself. I rate Huntress Managed SIEM nine out of ten.

My main use case for Huntress Managed SIEM is to have one central place for our alerts from various systems to come in.

I can give you a specific example of how I use Huntress Managed SIEM for centralizing alerts: we have our Unifi system connected to it, so when networks go down, we get alerting around it and also keep a log of things that happen. We also have our EDR with the managed AV alerts going into there as well. This gives us a log of when any kind of incidents would occur, allowing us to provide reporting if we need to.

The best features Huntress Managed SIEM offers are that the integrations are pretty easy between various software, and for ones that don't have a native integration, there are API calls that you could use. We appreciate that a lot. We're also using other Huntress services, which are connected in there as well.

Those easy integrations and API calls make ticketing much easier with the integrations, and with everything coming into one place, it's an easier dashboard to read and interpret so we can get the data we need from it.

Huntress Managed SIEM has positively impacted my organization; prior to coming on board with Huntress, we didn't have a place for a SIEM at all. Having that allowed us to offer it out to clients and to have that centralized location where we can easily manage a lot of the alerts that come in.

Since implementing Huntress Managed SIEM, I would say it saved time just because of where the alerts come from; it's one spot that we can go through and locate things. It creates better tickets than just doing an email alert.

Huntress Managed SIEM can be improved with more integrations; that would always be great. The custom ones that you can create are good, but having more native ones would be even better.

Regarding Huntress Managed SIEM's AI capabilities, I think its governance and security are pretty good. I think Huntress Managed SIEM's AI capabilities are still in its early stages, so it probably will need some improvement over time, but I think that's something that will get better as it's around longer and improved.

My experience with the behavioral analytics feature in Huntress Managed SIEM is that I think it's pretty effective at surfacing suspicious activity.

I've been using Huntress Managed SIEM for over the last six months.

I find Huntress Managed SIEM to be stable.

Huntress Managed SIEM's scalability seems to be pretty good.

The customer support for Huntress Managed SIEM is top-notch.

I didn't previously use a different solution; we looked at a few different ones and ended up landing on Huntress and have been happy with it.

I feel it took a pretty quick time to see actionable detections after deploying Huntress Managed SIEM; I feel it's faster than the email alerts.

The visibility provided by Huntress Managed SIEM on the same day of deployment felt like it took a couple of days in order for it to actually really start to show.

I don't know if there's been a total return on investment, but there has been some time that has been saved, and I'd probably gauge it in the realm of around three hours a month.

My experience with pricing, setup cost, and licensing is that everything was pretty easy to do; I have a rep that I worked with, and they were able to get me set up with the trial first and then go from there, test it out internally, and then we were able to start rolling out for clients.

Before choosing Huntress Managed SIEM, we did evaluate other options; we looked at Splunk as the big one.

It's super important for my organization that Huntress Managed SIEM offers security and compliance solutions without complexity; the more complex that it is to set up, the less likely there will be more adoption. The easier it is, while still being secure and compliant, the better.

We are not using the feature in Huntress Managed SIEM that requires no alert tuning.

My advice for others looking into using Huntress Managed SIEM is to get in with the trial, start playing with it, and make sure you get all your connections and see how it works.

I give Huntress Managed SIEM an overall rating of eight out of ten.

Huntress Managed SIEM is used for security and event management, specifically for firewalls and remote desktop gateway servers.

Huntress Managed SIEM brings SIEM to the SMB level so small companies can use an enterprise SIEM solution while filtering out a lot of noise, which is a great feature of the product.

Huntress Managed SIEM offers security and compliance solutions without complexity. This is why we use it for firewalls and remote desktop gateways to avoid needing other solutions to save all the logs from the firewall. If there is an incident, we can search all those logs, and we have a great solution within Huntress Managed SIEM, which not only collects logs but also includes the human-led SOC that watches over it and identifies issues.

Huntress Managed SIEM requires no alert tuning. They use a standard set of filtering and are constantly tweaking it, so all the noise is already gone. This impacts data storage but also ensures that when searching, you get only the things you really want to see, which is very helpful.

Huntress Managed SIEM helps identify potential threats early in the attack lifecycle through enhanced correlation and detection coverage. This is why we installed it on remote desktop servers since failed login attempts get logged in the Windows log file, but we are not searching them actively. The SOC notices them from the SIEM events and can identify issues if there are any, which is very helpful.

Behavioral analytics in Huntress Managed SIEM effectively does two things for us. It gives us peace of mind that we are logging all events, and the SOC will find issues, providing them with more telemetry data to identify problems that may involve more than one machine.

After implementing Huntress Managed SIEM, we see the value immediately because we start collecting the logs we need for compliance right away, resulting in immediate value from that perspective.

Huntress Managed SIEM has areas for improvement regarding more log sources. They are working on connecting more sources to the right format for events, such as a Fortinet firewall, but we use other firewalls as well, so that could use some development.

The deployment of Huntress Managed SIEM is somewhat complex compared to ITDR and EDR, as those are just click, click, click, and next, next, finish, while SIEM requires some form of configuration. Additionally, a Huntress agent is needed within the same network as the firewall to collect those logs, so it would be a great addition if they could make it possible to log events directly from a Fortinet FortiGate firewall to Huntress Managed SIEM.

Huntress Managed SIEM has been used for about a year to a year and a half. We started using ITDR and EDR from the beginning, and then SIEM was released.

For stability, I rate Huntress Managed SIEM a nine.

For scalability, I rate Huntress Managed SIEM a nine.

I would rate the technical support of Huntress Managed SIEM a nine.

Huntress Managed SIEM collects events and provides visibility within a few days of deployment, not necessarily on the first day, but visibility of the logs is established within a few days.

Regarding pricing, I think Huntress Managed SIEM is expensive, so I would rate it around an eight or nine.

We are looking into the broader log source integration feature of Huntress Managed SIEM, but we have not used it yet. We currently use it for firewall and remote desktop gateway, but not for other things.

Other MSPs should enable SIEM for all firewalls they manage. I already enable SIEM for all firewalls that we manage and then try to sell it to customers afterwards. From my perspective as an Operations Director, it is essential to ensure everything is logged and that we remain compliant. If there is an issue, we at least have something to search to understand what happened, which is invaluable. Rather than just selling it as a product, it should be genuinely used for operational purposes, especially since the pricing is very affordable. I would rate this review a nine overall.

With the latest threats and zero-day attacks, I can utilize Huntress Managed SIEM to detect them. Huntress Managed SIEM was able to detect zero-days and alert our team before they could be exploited.

These customized dashboards help in managing our applications, monitoring our applications, and also help in keeping track of our crown jewels.

There are automated reports which can be configured on the platform and shared with stakeholders based on what devices they are managing.

Huntress Managed SIEM has helped in both angles, improving efficiency in SOC operations where the mean time to detect is drastically reduced.

Regarding Huntress Managed SIEM's AI capabilities, I find it fairly accurate at the moment. There are certain false positives, but I believe it would improve over time.

The effect of Huntress Managed SIEM's flat and straightforward pricing is quite useful because I can keep track of budget and also plan for future involvements.

It is quite important for my organization that Huntress Managed SIEM offers security and compliance solutions without complexity; it helps in saving time for both our SOC team and also our audit and compliance team.

I am using Huntress Managed SIEM's feature that requires no alert tuning; it helps in certain areas where it automatically fine-tunes the alerts based on thresholds, but it is not always effective and manual intervention is at times required.

I have used the broader log source integrations feature of Huntress Managed SIEM, and it helps in deep diving into each device type, so I can integrate more log sources and log types within a certain log source.

My advice to others looking into using Huntress Managed SIEM is that it is definitely something which you need to try, and I recommend conducting a proof of concept before you buy. My overall rating for this review is seven out of ten.

My main use case for Huntress Managed SIEM is to monitor our infrastructure.

To monitor my events, one special thing compared to other SIEM tools is that it shows only important logs instead of displaying all logs. I do not need to see 1000 or 10,000 logs; I only need to see 10 logs that are very important.

This is important for my team because it will save my time and help us catch issues faster.

Huntress Managed SIEM has positively impacted my organization by reducing employee costs and reducing the time required to manage logs.

I can share that recently, I experienced a server attack which proved to be very helpful. We do not have to analyze all events; we can easily take the logs we need through the tool. Alerts will be triggered before the duration of the hack is complete.

In my opinion, the best feature Huntress Managed SIEM offers is the advanced filter AI. Instead of showing all logs, it shows only important logs, which is a very important capability.

This feature makes my day easier because we do not have to take logs one by one, and we do not have to take unnecessary logs. We only have to take the important logs, and we can easily find the root cause through those important logs instead of taking all logs. Whether you see 10,000 logs or only 100 logs, identifying the important ones will be very valuable for you.

I did not find anything for improvement; Huntress Managed SIEM is a completely perfect and stable product.

I have been using Huntress Managed SIEM for the last three months.

Huntress Managed SIEM is stable in my experience.

In my experience, Huntress Managed SIEM's scalability is very good and stable.

Training will be provided by the Huntress team, which is very easy and very collaborative. They will guide us through all aspects of the deployment. That has been a very best experience of my deployment.

I did not evaluate a different solution before Huntress Managed SIEM; I received that solution from management to use, and we started using it.

The time it took to see actionable detections after deploying Huntress Managed SIEM saved my team much time. After deployment, it saved a lot of time for my team to manage and handle logs. That has been very perfect.

On the same day of deployment, the implementation was very good. Training was provided by the Huntress team, which was very easy and very collaborative. They guided us through all aspects of the deployment.

I have seen a return on investment from using Huntress Managed SIEM because it saves a lot of time.

Before choosing Huntress Managed SIEM, we did not evaluate other options; we received approval for this tool only from management and started using Huntress Managed SIEM.

I do have something else to add about how I use Huntress Managed SIEM in my workflow; we are taking the logs from all of our systems. It will help us to manage all our infrastructure.

I am not using Huntress Managed SIEM's feature that requires no alert tuning; we are using it for taking the alerts only.

I would assess Huntress Managed SIEM's enhanced correlation and detection coverage in identifying potential threats earlier in the attack life cycle as very beneficial. Previously, I had to check all logs manually from all applications, and this tool helps us filter all logs and show only the important ones, which is very beneficial.

If you want to secure your infrastructure and save a lot of time for your organization, you can use Huntress Managed SIEM. It saves a lot of time. Instead of showing all logs, you see only the alert logs, which will be very beneficial for you. I would rate Huntress Managed SIEM a 10 out of 10.

My use case is for security information and event management.

The best feature in Huntress Managed SIEM is the automated threat detection.

I also find the compliance reports included at no extra cost to be quite valuable.

Regarding the feature that requires no alert tuning, we are using the advanced filtering so we only see actionable events and not lots of noise, which filters out any false positives or areas of no concern.

The enhanced correlation and detection coverage in identifying potential threats early on appears to be working well based on what I have observed and heard.

During the year I have been using it, I have seen improvements such as no alert fatigue, which is beneficial, and obviously the automated threat detection. I think it is fairly easy for our techs to manage as well because Huntress Managed SIEM's SOC carries out most of the workload, making it a better operational advantage.

In the past year, I have seen that the solution has saved us time.

In my opinion, there is room for improvement in Huntress Managed SIEM, particularly in integration with third-party solutions.

For example, integration with SentinelOne as a solution where improvement could be beneficial.

My experience with the behavioral analytics feature is that we think it is good, but there is still some room for improvement as it is still maturing. I have been satisfied with it so far.

I have been using the solution for about 12 months.

I would rate the stability as an eight.

Regarding scalability, I would rate it as an eight.

I would rate the technical support as an eight out of ten.

I am not sure off the top of my head which other solutions I have tried or tested, but I would be able to check on that.

Regarding the deployment process, I had no challenges and would say it was deployed in a day.

Huntress Managed SIEM does not require any maintenance on my end, as Huntress manages most of that from their SOC.

I would say it has saved us about 20 percent.

Regarding pricing, I think it is cost-efficient. I believe most competitors charge by the data slightly differently compared to how this solution does, as it is per data source rather than data size in gigabytes, so I think it is good on that front.

I do not have problems comparing Huntress Managed SIEM with other SIEM solutions.

I noticed the value of the solution probably after a few months.

This assessment is based globally.

I am not really sure on the process of aligning Huntress Managed SIEM, specifically its compliance reports, with our existing security framework, as it is not something I am involved with.

I would recommend this product to other users in terms of pricing and support, as I think it is a good product. I would rate this product an overall 8 out of 10.

Huntress is our primary MDR solution, though we have had some clients on Arctic Wolf and Perch Security. We deploy it across all different verticals, including hospitals and healthcare, small businesses, law offices, and municipalities, as part of our full stack.

We use the complete Huntress stack, which includes the MDR, ITDR, and the SIEM. We were one of their early testers for the SIEM.

Huntress's response time is far superior to that of any other vendor we have tested for MDR.

It removes the fear of threats, knowing that Huntress Managed SIEM is monitoring the environment and will catch items and alert us appropriately, without noise.

I would appreciate more features in the stack. I would like Huntress MDR and SIEM to integrate with EDRs like SentinelOne to combine that level of intelligence and information into their stack so that they can leverage whatever protections the client has and gather that intelligence to help with the MDR side.

Regarding the SIEM, I would like to see more features added. I would appreciate the capability of setting our own alerting based on certain triggers within the logs so that we can compete and fill a void that their SIEM has compared to other SIEMs in the industry such as Perch Security for ConnectWise.

I have been using this solution for approximately ten years, since Huntress was a small startup.

We do not have to reach out to support very often. When we do, sometimes the cases take a bit more time. I would rate their support at an eight. There is always room for improvement. Usually when we reach out, it is for a bigger issue that may require development expertise. I find that some of that takes time with any vendor, and that can add delays in communication because you are communicating to tier one and tier two people who are then communicating on the back end, so you are not getting updates as frequently.

Huntress is priced competitively in the industry. We appreciate their model in terms of MSP focus with tiered pricing. We understand what the pricing will be based on how many agents we have, which makes planning easy when selling a product and baking it into ongoing costs as part of a stack.

ConnectWise has a fully featured SIEM solution in terms of alert and log generation, and alerting based on that, whereas Huntress Managed SIEM is working to remove much of the burden, which is beneficial for us. However, there are certain alerts that I would like to have automatically create a ticket or generate an email based on being generated or found in the logs. This review receives an overall rating of eight out of ten.

My main use case for Huntress Managed SIEM is setting up security logging for our firewalls. My primary purpose is to set them up for compliance reasons, and in addition to that, it is good to use when analyzing situations in which an endpoint device may have been compromised, having that additional data there to get information for further review.

Huntress Managed SIEM has positively impacted my organization primarily by helping us help our customers achieve the compliance levels at which they are trying to achieve, and it also gives us additional information when we are reacting to security events that are presented from Huntress's SOC.

A specific example of how having that extra information from Huntress Managed SIEM has helped me respond to a security event or achieve compliance is that it has become a mandatory requirement for our customers with CMMC to have data log retention, and Huntress Managed SIEM allows that functionality.

The best features Huntress Managed SIEM offers include the wide variety of ways in which the SIEM can gather source materials, how long the data can be stored for, the volume of storage, and the ease of use of the queries using the AI search function.

The AI search function has simplified the ability to search for syslog events; prior to the AI feature, I would have had to use Google to build the ESQL queries needed to gather the information, whereas it is now nice to be able to have it inside of the platform.

I have not run into a situation where there has been a problem, and even when I have reached out to customer technical support, they have been able to immediately address any problems that I have encountered.

Huntress Managed SIEM's scalability is fine and works great, as we have many customers already in the platform.

The customer support is excellent.

The advice I would give to others looking into using Huntress Managed SIEM is to review all relevant data and help guides before deployment. I would rate this product a 9.