Huntress Managed EDR Reviews

The client had likely experienced ransomware attacks and wanted to adopt a more proactive approach to address such threats. They needed a solution that would minimize downtime and avoid disruptive incidents. 

Testing Huntress improved our organization by enhancing service offerings. It gave us the confidence to approach clients and present a solution well-suited for those seeking basic and advanced options. It positioned Huntress as an ideal, lightweight MDR solution. Additionally, we generated a decent amount of income from it.

First and foremost, I appreciate the team's expertise in finding the solution. For example, one of the lead researchers, has a public presence and a YouTube channel, demonstrating a high competence level within the research team. It instilled confidence that they would effectively detect and address threats.

Second, Huntress responded very quickly during testing—within about ten minutes. While this speed might not always be guaranteed, the prompt response during my mock tests, where they successfully locked down the machine, showcased their efficiency and accuracy.

Additionally, we are an MSP, and the pricing model Huntress offers works very well for us.

Finally, the reports provided after an incident are very thorough. They offer a clear and detailed description of the attack, which reassured me of its effectiveness.

The product could be improved in terms of customization options available for reports. Specifically, there should be more granular control over report scheduling and the ability to include more specific information.

I have used Huntress for six to seven months.

The product is stable.

Our clients have 150 Huntress users in the entire organization. Regarding the number of users I could serve, I rate the scalability a ten out of ten.

The technical support services are good.

Positive

The initial setup was straightforward. It took a few minutes to complete the process.

I implemented the product for the client's entire organization.

We received around 200% return on investment using Huntress.

For example, if the platform's price was $1 per annum, we charged $3. However, that includes all the reporting, account management, and other services.

While the product did not directly reduce costs, as there was already an existing solution, it did help by eliminating the need to hire a dedicated security analyst. It meant we could avoid adding that headcount to our business, saving on potential additional expenses.

It may have reduced costs by approximately 50 % compared to our previous solution. The one we were using involved paying a company based in Malaysia that utilized a specific piece of software to deliver their service. Switching to Huntress brought our costs down by 50%.

It has saved us a significant amount of time in terms of reporting. The reports generated were already comprehensive, so we only needed to configure them to be sent to the account manager and the company's resident IT staff.

Another significant time saver was the ease of installation. We could effortlessly integrate it into our existing remote monitoring and management (RMM) system and deploy it to the machines. This contrasted with our previous solution, which did not support unattended installations. We had to arrange for someone to install it on each machine, even if it was remote, requiring scheduling and user notifications. The client had around 100 to 150 machines, so this process was very tedious.

I rate the product pricing six out of ten for the Malaysian market. However, I would rate it a three out of ten for the Australian, New Zealand, or Singapore markets.

Huntress is easy to use. It immediately improved visibility and understanding of our security posture.

It is a good solution for small and medium-sized businesses (SMBs). It is quite effective in the context of the SMB market and for managed service providers (MSPs) deploying the solution. It is easy to install on machines and fits well within the price range for companies that might be using Microsoft 365 but have yet to be ready to move to Business Premium.

It also manages standalone Microsoft Defenders, which adds a unique advantage. It provides a holistic approach, helping us tap into the telemetry from the existing antivirus on Windows machines, providing a more comprehensive solution.

We had to use some other solution alongside Huntress. This client was using Bitdefender as a standard antivirus. If a client wants to stop using Bitdefender, we recommend using Microsoft Defender.

Our team uses some degree of AI to help them work through the telemetry they collect.

I recommend the product to others and rate it a ten.

Huntress is a product that we automatically deploy to all our clients. It functions as a basic antivirus solution for most of them. We roll out Huntress immediately after deploying our Kaseya agent to conduct a quick sanity check on the network endpoints and ensure no hidden threats are lurking. It's one of the first tools we use and is included as part of our standard package. By providing a baseline assessment, Huntress gives us peace of mind that no unexpected issues are lurking in the network.

Security stacks weren't a common thing in the past, but they've grown dramatically in popularity. Today, we rely on a mature and robust security stack, with Huntress as the first line of defense. This represents a significant shift from our previous reliance on antivirus software, which only reacted to known threats. Unlike antivirus, Huntress proactively investigates potential threats and identifies hidden risks.

Huntress offers two solutions: an on-premises agent and a cloud platform. We manage the cloud platform and deploy their agent to our client systems.

Using Huntress is simple. Whenever an agent is deployed, Huntress automatically rolls out, seamlessly integrating with our infrastructure. This eliminates the need for manual intervention from our technical team. Once alerts are triggered, our trained team readily identifies and addresses the flagged events, making the entire process highly efficient.

Every small and medium-sized business should consider implementing a solution like Huntress. Its importance cannot be overstated. We adopted Huntress as the cornerstone of our security stack years ago, and it remains our go-to solution. Although we've enhanced our security measures over time, Huntress remains the first line of defense we deploy.

We have our own Security Operations Center. While Huntress provides invaluable backend monitoring, our dedicated SOC team is responsible for handling alerts triggered by Centrus. Having Huntress' 24/7 monitoring significantly lightens the workload. It ensures I don't have to jump up in the middle of the night or take on the additional role of resolving issues as the CTO. My team handles day-to-day operations, while a select group receives filtered alerts from Huntress. These alerts only include high-priority items requiring immediate attention, eliminating the time spent chasing false positives. This makes us more responsive and focused on resolving critical threats efficiently.

Huntress can remediate low-severity threats automatically. Our team uses this ability all the time.

It hasn't increased our workload. Huntress has narrowed our focus by handling routine tasks and allowing us to prioritize the truly important items. We have a high level of confidence in the product, which means I don't have to constantly second-guess it. While it's not completely "set and forget" since we don't ignore it entirely, it's something we trust. By automating tedious tasks and providing relevant alerts, it frees up our team's time to focus on other critical areas.

We saw a fairly immediate improvement in our security upon deployment. Within the first few days, we identified three or four client-related issues that would have remained hidden without Huntress. This early success demonstrated the platform's effectiveness in revealing previously unseen security concerns. The impact was both immediate and positive, allowing us to quickly address the problems and move forward.

We've been very impressed with the features Huntress has added. We particularly value Recon and Windows Defender Management, and we leverage much of the platform's functionality.

From a CTO's perspective, I'm focused on identifying potential security vulnerabilities and ensuring our SOC team has the tools to address them effectively. Huntress helps by highlighting potential issues, allowing us to take proactive measures. We actively utilize Managed Antivirus, Ransomware Canaries, and External Recon for this purpose. While features like Persistent Footholds and Process Insights operate silently in the background, alerting us upon detection, we primarily rely on the aforementioned features for our day-to-day operations.

We need an API to automatically retrieve metrics and data about backend activity so we can generate client reports. We believe in comprehensive reporting and actively inform our clients about our efforts. Our daily, weekly, and monthly activity reports demonstrate our proactive approach. Currently, Huntress lacks an API to pull this data, hindering our ability to efficiently convey what happened in the past week, month, or quarter, and how it was addressed. An API solution would streamline reporting and enhance client transparency.

In addition, we require an external recon report generation system. Ideally, we should be able to select a client and instantly generate a report with a single click. I expressed this need to one of Huntress' developers, emphasizing the importance of user-friendly report access. Such a system would significantly improve our workflow and communication with clients.

I have been using Huntress for five years.

Our clients have not experienced any stability issues with the deployed Huntress agent. Due to its low-impact nature, they wouldn't likely notice its presence even if we informed them of its integration.

We have not encountered any scalability issues thus far. Huntress has successfully handled everything we have thrown at it.

The technical support team is fantastic. While I haven't needed their assistance in a while, every time we've interacted, they have been incredibly responsive. They've even gone above and beyond by calling me directly to address urgent issues. For example, on a weekend or after hours, they've proactively contacted me to inform me of a potential device problem and offered to isolate it until a resolution could be found. They even asked me to let them know when I was available for a fix. In short, their proactiveness has even helped me avoid problems before they arise.

Positive

We already had antivirus options like Defender and Symantec, but Huntress offered something different. It wasn't just another antivirus; it provided a new perspective on potential threats lurking in our systems, beyond what traditional antivirus could detect.

I deployed Huntress myself and found it to be a straightforward process. Huntress provided excellent documentation that made the rollout easy to follow. This has allowed us to automate future deployments, further simplifying the process.

The deployment only took a day or two, despite requiring several manual steps. I had to install the software, configure it, and then initiate the scans. While these steps might sound time-consuming, they were quite quick due to automation scripts. The entire process was straightforward and required minimal time investment from me. 

The implementation was completed in-house.

Huntress remains our go-to tool. We never even considered replacing it. I think that's the highest form of flattery: it's the first thing we deploy and the only one we never question.

The pricing model for Huntress is similar to competitors and is charged per endpoint. While they have raised prices over the years, they've also invested significantly in development, which justifies the cost. Additionally, the tool itself is valuable, and we've never complained about the pricing.

I would rate Huntress ten out of ten. They are a partner and the first thing we roll out. 

Currently, we're not utilizing the EDR component, not because we believe it's not valuable, but simply because we already have an existing EDR solution in place. Redundancy doesn't make sense at this stage.

When I first adopted Huntress, I lacked a dedicated SOC team and a comprehensive security stack. Since then, we've built a security stack with roughly twelve tools encompassing various areas, from basic spam filtering to advanced threat detection covered by Huntress, Microsoft 365 security, domain DNS filtering, and more. We established a dedicated SOC team. However, expanding our security stack does introduce the challenge of requiring additional personnel to manage and monitor these systems effectively. My intention isn't to diminish the value Huntress provides or imply it solely created an additional workload. Instead, I want to emphasize its significant role as one crucial piece within our broader security ecosystem.

Being a long-standing client of Huntress provides us with significant advantages. We consider them a true partner, not just a vendor. If I need anything, whether it's a tabletop exercise or additional information, I can simply contact a few key people at Huntress, and they always go above and beyond to assist. Similarly, if I need data or someone from Huntress to present alongside me, they readily oblige. This level of support solidifies their status as a partner invested in our success and the value we bring to our clients. In essence, they offer more than just a product; they provide ongoing support and collaboration to help us improve.

Huntress updates automatically. The only maintenance required is a periodic check to ensure no pending actions need our attention. It runs silently in the background.

I recommend seeing Huntress in action by checking out a demo. While it's valuable to talk to a Huntress partner and do your due diligence, make sure to also engage directly with Huntress by participating in a demo, attending a webinar, or trying their product. We evaluated Huntress on our network and gained valuable insights by talking directly to a Huntress partner.

We utilize Huntress for endpoint protection across the accounts we manage. When requiring endpoint detection and response capabilities, we leverage Huntress for that functionality as well.

Instead of relying solely on basic antivirus software, we implemented Huntress to elevate our security posture. This empowered us not only to proactively track down threats but also to collaborate with experts in identifying and remediating them.

Huntress is extremely easy to use.

Huntress is a great solution for the SMB market.

By minimizing the time we spend identifying risks, Huntress helps us reduce the overall risk landscape for our clients. They are also great partners to work with, and we saw the benefits almost immediately.

Huntress's 24/7 managed service significantly improved our overall workflow and empowered our employees to focus on tasks aligned with their skill sets. This has enabled them to develop their expertise and take on greater responsibilities.

The ability to automatically remediate the low severity threats is great.

Huntress has improved our overall security posture. We were able to start improving our security within the first three months of deployment.

While threat hunting is undoubtedly the most valuable feature, the combination of IP scanning, foothold identification, and canary monitoring has also proven to be incredibly beneficial.

The application control system could benefit from improvements in identifying and managing both whitelisted and blacklisted applications. Additionally, it would be valuable to have the ability to automatically lock down applications identified as potential threats.

I have been using Huntress for five years.

Huntress has been reliable with no stability issues.

Huntress is a scalable solution.

The technical support is knowledgeable and helpful.

Positive

Previously, we used Kaspersky for our security needs. However, by combining Huntress with SentinelOne, we were able to successfully transition away from it.

The initial deployment is straightforward. The deployment took 30 days and required two people to complete.

The implementation was completed in-house.

We have seen a 20 to 30 percent return on investment.

The pricing is competitive, in line with Huntress's offerings, and aligns well with our business model.

I rate Huntress a nine out of ten.

Organizations are comfortable taking on certain calculated risks. However, I believe we need to employ specific types of staff to align our service delivery with our resource allocation. The Huntress platform has facilitated this crucial realignment.

The tool itself does not require maintenance but there is ongoing management.

Users should ensure they have an accurate inventory of the assets they need to protect, the chosen protection methods, and any additional relevant details. Assigning one or two dedicated individuals as "Champions" of the tool will help them fully leverage its benefits.

Our primary use case for the Huntress solution is cybersecurity.

I couldn't say specifically how it's helped our organization, but it did alert me to some possible issues that needed double-checking. 

I have found it valuable that this solution is always there and always armed.

In the next release, I'd like to see more intuitive dashboards.

I have been using the Huntress solution for about a week now.

I would rate the stability of this solution a 10, on a scale from one to 10, with one being the worst and 10 being the best.

I would rate the scalability of this solution a nine, on a scale from one to 10, with one being the worst and 10 being the best.

Regarding the pricing of this solution, I would rate it a nine, on a scale from one to 10, with one being very expensive and 10 being a great price.

We have a hybrid model deployed for this solution where the dashboards are on the cloud, but the agents are on the machines.

Overall, I would rate this solution a nine, on a scale from one to 10, with one being the worst and 10 being the best.

We use their EDR platform and their MDR platform. By implementing Huntress, we wanted to add another layer of security to our workstations across all of our clients.

Threat protection on the endpoints and great customer support are some of the benefits. There is a great vendor relationship. We could see its benefits pretty immediately. They work well with you. They are very attentive, and they make sure that their partners get whatever support they need.

It has reduced the triage time. When they do find an alert or an issue, many times, they post an accurate resolution, so my technicians do not have to investigate to determine a resolution. It is already outlined for them.

Huntress has the ability to automatically remediate low-severity threats. We use this feature in some cases and not in all cases. It works well when we have used it. It has impacted our workload and security. The faster you can fix the security issue, the better off you are.

Using Huntress has helped reduce the need for expensive security tools or to hire expensive security analysts. It is important. It is hard to maintain a security staff.

We are much more secure today than before starting to use Huntress.

It is very easy to use. It is a great solution. They are one of the better vendors that I have ever worked with since I have been in the industry.

Their EDR can have increased coverage for Macintosh. They do not fully secure Macintosh computers.

We started with them at least four years ago.

I have not seen any stability-related issues so far.

It is very scalable.

They are very good. They are very fast to respond, especially in emergencies. They have great support. I would rate them a 10 out of 10.

Positive

We were using Bitdefender. We switched because Huntress was more comprehensive and had 24/7 SOC.

We use their cloud portal, and we deploy from there. I was involved in the initial vetting of the product and the vendor, but I was not involved in doing the installation.

In terms of maintenance, when updates need to be pushed out, we make sure that they are pushed out. They normally get installed automatically. We have a tech person who daily makes sure that everything is okay in the portal. There is no real maintenance. There is nothing that we would not do for any other vendor.

After deploying Huntress, we could immediately see improvements in our organization's security.

It works well for an MSP.

We evaluated Blackpoint Cyber and SentinelOne. We chose Huntress just because of what they offered. Blackpoint Cyber and SentinelOne are great products. It was a hard decision between the three, but we chose Huntress.

Those evaluating this solution can research it online. They can ask their peers or just contact Huntress. They will guide them through the whole process.

I would rate Huntress a 10 out of 10.

We use Huntress with other antivirus solutions like Microsoft Defender to ascertain the issues that happen at the endpoints which antivirus solutions may not always pick up.

We don’t have the required staff to watch the issues that are happening. It is good to have a team from Huntress who can watch the logs 24/7. The tool’s automatic remediation is also fantastic. The solution’s interface is also nice and easy to use. The Huntress team saves us time by going through the issues.

The Huntress is not a standalone solution. It really needs to be used with something else such as Microsoft Defender or another antivirus solution. It would be nice to see the product fleshed out by the Huntress team and include the antivirus solution part as well. I want it to be a full-fledged XDR product. It would push the tool to a higher price range but it would be nice to see the fleshed out features. I want them to integrate more features from the XDR realm.

I have been using the product for a year.

The tool is stable. We haven’t had any issues with respect to stability.

The tool is scalable. Our company has seven users for the solution.

We have received quick responses from tech support.

The solution is managed on the cloud, and the software is installed directly onto the endpoint. The tool’s deployment is easy. You can download, install and run the solution. It is as simple as that. The tool also has deployment scripts in case you need them. The installation is pretty quick and you don’t need many resources to accomplish it. If you are planning a large deployment, then you can get scripts for the management tool.

I think there is ROI with the use of the solution. It doesn't take very long to get train someone to use the solution. Therefore, you can save on training costs. It has also stopped quite a few issues that could have turned worse.

The tool’s price is very good. You just need to pay for the standard license. However, you need to pay the additional cost for Microsoft Defender.

I would rate the solution an eight out of ten. The solution is extremely easy to use compared to other products. There are many other products with cumbersome portals that are difficult to use. It can be very difficult to teach new engineers how to use those platforms well.

I deploy Huntress to my mid-tier clients to leverage 24/7, 365 threat-hunting capabilities.

Huntress monitors for anomalous behaviors and detections that would otherwise be perceived as just noise and filters through that noise to pull out the important bits. It then alerts me with the remediation steps needed to fix those problems and offers to automatically deploy those fixes if I wish. This enables me to manage and monitor way more endpoints than I would normally be able to.

Huntress' best feature is the threat-hunting expertise that is part of their 24/7 SOC. They investigate anything they don't know about, and I've had things that look like benign detections returned to me as serious threats with advice on how to fix them.

Some of Huntress' reporting could be improved. Specifically, when we get a notification that something has been investigated and found benign, we don't get any information about which devices the issue was on. It's not until we get an actual action plan for a threat above a certain threshold or representing a certain compromise that we know exactly what device is involved. In the next release, Huntress should include better integration with AV or endpoint detection and other response solutions than Windows Defender.

I've been using Huntress for close to a year.

I would give Huntress a rating of nine out of ten. The only thing that rivals it is SentinelOne Complete when it's managed and monitored by a security operations center like the offering by OverWatch.