No more typing reviews! Try our Samantha, our new voice AI agent.

ConnectWise SIEM vs Huntress Managed EDR comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 29, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Endpoint Detection and Response (EDR)
5th
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
115
Ranking in other categories
Endpoint Protection Platform (EPP) (4th), Extended Detection and Response (XDR) (4th), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
ConnectWise SIEM
Ranking in Endpoint Detection and Response (EDR)
55th
Average Rating
8.6
Reviews Sentiment
6.6
Number of Reviews
3
Ranking in other categories
Security Information and Event Management (SIEM) (46th), Secure Access Service Edge (SASE) (22nd), Managed Detection and Response (MDR) (24th)
Huntress Managed EDR
Ranking in Endpoint Detection and Response (EDR)
6th
Average Rating
9.2
Reviews Sentiment
7.5
Number of Reviews
64
Ranking in other categories
Managed Detection and Response (MDR) (1st)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
reviewer2711757 - PeerSpot reviewer
Cyber Security Software Engineer at a tech services company with 11-50 employees
Automated alerting and reporting excel while cost and feature limitations remain
I find automation to be one of the best and most valuable features of the product. Machine learning is incorporated into the solution, though AI is a broader term that I wouldn't apply here. I haven't personally explored AI yet, but I will investigate it. Machine learning functions more as automation in my experience, as there's no training involved yet. I want to conduct R&D on another project with Wazuh to determine how to capture usage, for example, tracking user logins and time spent. This is where I need to implement machine learning. Additionally, the extraction of GeoIP adds complexity. The solution is effectively reducing incident response times in operations.
Abhishek Saini - PeerSpot reviewer
Professional Services Engineer at Next7 IT
Managed detection has transformed incident response and now delivers faster, focused protection
Overall, my experience with Huntress Managed EDR has been very positive. If I were to suggest improvements, I would like to see more advanced customization and reporting capabilities, particularly for MSPs managing multiple clients. For example, additional dashboard customization, more granular alert filtering options, and enhanced executive level reporting would help teams present security insights more effectively to their clients. Deeper integrations with a broader range of third party security and IT management platforms could also streamline workflows and reduce the need to switch between multiple tools. Another area of improvement would be expanding automation options for common remediation tasks, allowing security teams to respond even more quickly to certain types of threats while maintaining appropriate control. These are more enhancements than shortcomings, as Huntress Managed EDR already provides strong threat detection, excellent SOC support, and an easy-to-manage platform that delivers significant value in day-to-day operations. A few additional enhancements would make the platform even stronger, especially for MSPs managing a large number of endpoints and clients. From a user interface perspective, I would like to see more customizable dashboards that allow engineers to tailor views based on the client's priorities, threat levels, or operational metrics. Another useful feature would be additional automation and authorization options for common response actions such as isolating devices, initiating remediation workflows, or integrating with ticketing systems and SIEM platforms. Overall, these would be valuable additions, but they do not take away from the core strength of Huntress Managed EDR.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Monitoring is most valuable."
"The initial setup is pretty easy."
"It is easy to use."
"The biggest positive impact I see from Cortex XDR by Palo Alto Networks is a significant reduction in the number of people required to manage it."
"We use it for malicious connections from malicious websites, to identify payloads that might be inside the traffic, to identify malicious processes or bugs that are running on the network, and any activities that tend to lead to data infiltration."
"The multi-layered approach to the product gives you confidence that it will stop exploits, ransomware, worms, or viruses from compromising endpoints, essentially providing peace of mind."
"If the user leaves our premises or network, Palo Alto Traps will still be on that endpoint and will still apply our policies."
"The best feature of Cortex XDR by Palo Alto Networks is that it collects logs from different sections such as the endpoint, the network, and the cloud, making it easy to investigate alerts, collect some of the investigation packages related to the infected machines, and provide live response."
"One valuable feature of ConnectWise Fortify is the ability to add other teams and receive notifications when customers make changes or remove multi-factor authentication in Microsoft or SAP environments."
"The integration capabilities of ConnectWise SIEM are off the shelf, making it easy to buy and use; you just unpack it and use it."
"We have found the solution has great functionality and it is easy to use."
"Overall, it is really solid, with just a few UI placements, button descriptions, and caution messages that could be added before certain actions are performed."
"I evaluate Huntress Managed EDR as the best choice we have made for antivirus endpoint protection EDR solutions specifically for the SMB market."
"It catches things that no one else catches. We occasionally have things slip through antivirus and other things, but Huntress catches them. It is awesome as an additional layer of defense on top of other things."
"We don’t have the required staff to watch the issues that are happening. It is good to have a team from Huntress who can watch the logs 24/7. The tool’s automatic remediation is also fantastic. The solution’s interface is also nice and easy to use. The Huntress team saves us time by going through the issues."
"Using Huntress Managed EDR has helped reduce the need for expensive security tools or hiring additional security analysts since I can use that as the first port of call versus trying to get an external SOC."
"The endpoint protection is definitely the most impactful feature for clients. It just works. It is a set-it-and-forget-it type of solution."
"Huntress Managed EDR is probably the easiest solution to use, both to deploy and to maintain, of all the product lines and vendor partnerships we have."
"Huntress helped reduce the need for expensive security tools or to hire expensive security analysts."
 

Cons

"The dashboard could use some significant improvement, just making it more useful with more information. It has a limited amount of information right now. It is customizable, but I'd love to see a better out-of-box dashboard."
"There is also no recovery feature; if some endpoint is under attack there must be the possibility of recovering it or restoring it to a normal state."
"Palo Alto Networks Cortex XDR does not detect malicious activity like in other anti-virus solutions like Trend Micro and Windows with Cisco."
"Cortex XDR by Palo Alto Networks could improve its user interface, which is more complicated compared to competitors such as SentinelOne."
"It automatically detects security issues. It should be able to protect our network devices while operating autonomously."
"To jump from the partner to Palo Alto directly was challenging."
"The MAC agent is not as robust feature-wise as the PC version."
"Product might have some bugs."
"ConnectWise SIEM is primarily focused on notifications and is limited in that aspect, while Wazuh can automate the elimination process."
"The manage portion of the solution is complicated and should be simplified by having different versions to meet the needs of different size companies."
"ConnectWise Fortify could work on covering more areas, like phishing messages, which have become more complicated to detect."
"Some of Huntress' reporting could be improved."
"I am anxiously watching to see how they evolve their MDR for Office 365. If anything, I would like more automated remediation capabilities in their MDR for Office 365."
"Ultimately, the clarity of their alerts is paramount for effective threat communication and could benefit from clearer remediation steps."
"Regarding Huntress Managed EDR, they could add more features when compared to another EDR platform, SentinelOne."
"If I were to suggest improvements, I would like to see more advanced customization and reporting capabilities, particularly for MSPs managing multiple clients."
"I'd like it if Huntress could scan for software that's out of date or has open vulnerabilities. That would be useful for us. Scanning for vulnerable software would be helpful. Also, we've set it up to create a ticket in our ticketing system when there's an alert. It would be nice if closing that ticket would also close the Huntress alert. It doesn't do that right now, but they're working on adding that feature."
"The integration with Autotask could be improved."
"What I dislike about Huntress Managed EDR is that I would probably change my opinion since about the only thing I could really see is bringing down the price somewhat."
 

Pricing and Cost Advice

"This is an expensive solution."
"We didn't have to pay any additional fee for the cloud instance. It just came with the renewal, which was nice."
"Its pricing is kind of in line with its competitors and everybody else out there."
"Compared to CrowdStrike, Cortex XDR is an expensive solution."
"Licensing for Palo Alto Networks Cortex XDR can be costly, especially when it comes to a hundred users. A license is required for each user, and the subscription must be renewed on a yearly basis."
"If one wishes to work with another team or large number of users at a future point, he must purchase a license for them."
"It's about $55 per license on a yearly basis."
"Our license will require renewal in August, after which the maintenance will continue as usual."
"The solution is expensive."
"Huntress is priced fairly for the services and value it provides."
"I rate the product pricing six out of ten for the Malaysian market. However, I would rate it a three out of ten for the Australian, New Zealand, or Singapore markets."
"It works well for an MSP."
"Huntress Managed EDR offers a fair pricing model."
"The pricing is competitive, in line with Huntress's offerings, and aligns well with our business model."
"The cost-effectiveness of Huntress is much better compared to BlackPoint. Although Huntress does not offer all the finer details that BlackPoint does, it remains much more competitive in pricing."
"I rate the product's price a five or six on a scale of one to ten, where one is cheap, and ten is expensive since it is a fairly priced product."
"The solution is cheap compared to other alternatives. It offers good value for money. For the whole solution, it's up to about five pounds per device per month. Considering what it does, I think that's very good value."
report
Use our free recommendation engine to learn which Managed Detection and Response (MDR) solutions are best for your needs.
908,834 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
13%
Financial Services Firm
10%
Comms Service Provider
10%
Manufacturing Company
10%
Computer Software Company
13%
Construction Company
12%
Comms Service Provider
10%
Financial Services Firm
7%
Computer Software Company
11%
Manufacturing Company
9%
Comms Service Provider
7%
Outsourcing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise21
Large Enterprise54
No data available
By reviewers
Company SizeCount
Small Business63
Midsize Enterprise6
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
What needs improvement with ConnectWise Fortify?
I haven't utilized the advanced threat intelligence capabilities with ConnectWise SIEM. Advanced threat intelligence ...
What is your primary use case for ConnectWise Fortify?
I do not have experience with ConnectWise SIEM for RMM, as I mostly work on Wazuh, and I have a team that handles Con...
What advice do you have for others considering ConnectWise Fortify?
The review can be made anonymous if just my name and not the company name is used. I would assess the real-time visib...
What needs improvement with Huntress?
Overall, my experience with Huntress Managed EDR has been very positive. If I were to suggest improvements, I would l...
What is your primary use case for Huntress?
I have been using Huntress Managed EDR for approximately two years. My primary use case for Huntress Managed EDR has ...
What advice do you have for others considering Huntress?
Huntress Managed EDR's twenty-four-seven SOC support has had a positive impact on our security operations because it ...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
ConnectWise Security Management, ConnectWise Fortify, Continuum Fortify, ConnectWise SIEM, ConnectWise SASE
No data available
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Techvera, Syrex, Clark Integrated Technologies
Information Not Available
Find out what your peers are saying about ConnectWise SIEM vs. Huntress Managed EDR and other solutions. Updated: June 2026.
908,834 professionals have used our research since 2012.