Huntress Managed ITDR Reviews

My use case for Huntress Managed ITDR is peace of mind knowing where and how our accounts are being accessed from, how they are being accessed, and giving us the control and insight into that access.

My favorite feature of Huntress Managed ITDR is the automatic alerting and the automatic remediation. They will actually go and block an account or shut off its access if it does not meet our certain criteria.

I love the threat analytics provided by Huntress Managed ITDR, and that is part of the reason why we got it.

I benefit from the customizable alerts in Huntress Managed ITDR as I have used them to set up certain alerts for certain particular scenarios.

I appreciate the real-time monitoring feature of Huntress Managed ITDR. I appreciate the graphical interface it gives to see exactly where in the world people are accessing your environment from, what they are accessing, and what devices they are accessing it from.

Huntress Managed ITDR could improve by cleaning up the dashboard interface. I have to go to multiple screens to do something, so streamlining that dashboard experience would help.

I have been using it for approximately two years now.

I have not seen any sort of downtime with Huntress Managed ITDR.

We deployed Huntress Managed ITDR for 150 users to begin with, and from what I understand, it can scale even way further than that. We are barely scratching the surface.

The quality and the speed of the support for Huntress Managed ITDR were excellent. It was resolved the same day. I got links to comprehensive knowledge bases that provided all the information I was looking for. I would give a score of nine to the support provided by Huntress Managed ITDR.

The initial deployment of Huntress Managed ITDR was super easy. It was an hour and it was done.

Just one person is required for Huntress Managed ITDR. I did it myself.

I saw the benefits of Huntress Managed ITDR because I knew of someone else who was using the product, and that is when I jumped on it and decided to deploy it in my environment.

The pricing of Huntress Managed ITDR is competitive and fair. It was competitive and it came within budget.

The built-in Microsoft solution would be comparable. Huntress Managed ITDR is monitoring a Microsoft environment. The built-in features that Microsoft provides are not as granular as Huntress Managed ITDR is, but it would be the most comparable competitive alternative.

There were a couple of issues with Huntress Managed ITDR I needed to submit a support ticket for at the beginning, but that was solved within the same day.

I do not have too much regulatory compliance I need to meet with Huntress Managed ITDR, so that is not something I really take advantage of.

Huntress Managed ITDR does not require any maintenance on my end. Sometimes I might not access it for a week or two, and it is just running and it is alerting me when it needs to.

I would give this review a rating of nine.

My main use case for Huntress Managed ITDR is that we recently replaced one of our tools with it, and it has been working great so far. We appreciate receiving calls when a breach happens that give us advance notice, and we get notified and act on it fast.

I normally use Huntress Managed ITDR only when there is a breach or when there is an alert that we have to check. That is when we receive a call from Huntress Managed ITDR, and that is when we use it, but not on a day-to-day basis. It has been great working with Huntress Managed ITDR.

The best features that Huntress Managed ITDR offers include the ability to isolate a computer and have one of the Huntress engineers work on it and manage it, which is great. Additionally, receiving an automated call when an incident happens is also great.

Huntress Managed ITDR has been great in helping our team respond to incidents. The last time we had an issue, I contacted Huntress support engineers through chat, and they walked me through the process of isolating the computer. While we isolated the computer, we received a message that the computer had been remediated. There were a couple of things I had to do after remediation, which I completed after we put the computer back to the way it was and removed it from isolation. The positive impact Huntress Managed ITDR has on my organization is that we can act on incidents in a timely manner, allowing us to stop threats before they harm our organization.

Previously, with our other vendor, they only notified us through Teams, which was complicated. With Huntress Managed ITDR, the fact that they give us an automated call about an incident lets me respond faster to incidents. I do not have to wait six hours to check Teams to see if there was an incident or a breach. This has impacted us positively; I would say there is a six-hour difference in response time.

One thing about how Huntress Managed ITDR can be improved is that there are times in which we do not necessarily need to be engaged, and isolation can be triggered automatically so we do not have to do it. When Huntress Managed ITDR sees this is necessary, they can act on our behalf and isolate the computers without requiring our involvement. Because that takes a bit of time, and the faster we stop threats, the better.

I have been using Huntress Managed ITDR for one year.

Huntress Managed ITDR is stable.

Huntress Managed ITDR is pretty scalable; we are able to deploy it with our solution pretty fast.

Customer support for Huntress Managed ITDR is great; I would rate it a 10 out of 10.

We previously used Duo SGN.

I cannot speak to pricing, but the setup cost for Huntress Managed ITDR is quite fast.

I can say that there are fewer employees needed to handle it based on my job role; that is as far as I can tell you regarding return on investment.

We did not evaluate other options before choosing Huntress Managed ITDR; we switched based on feedback.

We are using the Incident Report Timeline feature, and for a couple of incidents, it has been great. We can provide it as evidence of how fast we act on incidents.

I would advise others looking into using Huntress Managed ITDR to not think twice and to make the switch. It has been working great for our organization, exceeded expectations, and beaten other vendors. Huntress Managed ITDR deserves a review rating of 9 out of 10.

For us, it's more for managing and giving us visibility outside of the normal 8-to-5 or 9-to-5 business hours. For us, it's managing all the user identities and making sure that they're secure, even when we're not around. That's probably the best way I could describe it.

I'd probably say the alert system has been pretty good so far. Obviously, we've only had it for a handful of months, but in our case, it's brought up alerts for things that we weren't aware of. So that was eye-opening and really helped us narrow down our focus, and we didn't necessarily have to take action on them, but it was good to have the insight about them.

It's been doing its job for us so far and has been working.

We've only had it a few months officially billed with an actual build of it. If I had to say a dislike would be I wish there was a little bit more customization. Right now, it's just out of the box and it works, and you don't really have too much control of granularity on things. It would be nice to have a little bit more, but at the same end, I understand they do that for a reason. They don't want people messing with things too much. So, I understand it, but it would be nice for maybe a little bit more advanced control.

Overall, we started this process last year, so you could probably say six months, but actively with the license, roughly two to three months.

Thankfully not. Our users don't even know it's on, so there have been no stability issues.

For us, we're not a huge business in terms of users. I've added quite a few users since we've signed. We did have some spare licenses to account for it, and it hasn't been an issue so far.

Nothing yet in terms of needing support. I mean, in the onboarding, there were some questions, but it wasn't more technical. It was just making sure I was clicking the right things. Everything was very simple and I probably didn't need to call. It was just making sure.

We actually tried XDR, Microsoft's solution on a trial for two months. It was just too complicated. At least for our business, we're a small IT team, so it was just too overwhelming to do all the setup and managing and maintaining. We stopped that trial, and then it came down to Huntress Managed ITDR and Addigy. We looked at the offerings from Addigy, and I think what ended up being the deciding factor was that we could actually go direct to Huntress Managed ITDR. With Addigy, I had to go through a MSP, and we just didn't want to do that.

Super easy. It's just signing all the paperwork, paying, getting a link, connecting it to our admin center, and that's it. It's really easy.

We looked at the solution from N-able, which is called Addigy. We also were looking at Microsoft XDR. So we compared those three solutions.

I think pricing is fair. We had tried and reached out to a couple of different vendors when we were evaluating a solution. They were, if not the most economic, they were neck and neck with the number two choice per cost per year per user. So that for us was a big selling point as well.

The human-led investigation and remediation aspect of the solution is important in our security operations. We didn't want to go with a solution that was strictly AI-based. We wanted to make sure there's a second set of eyes looking at the problem if there is one. So for us, that was important.

Regarding the effectiveness of the 24/7 human-led detection response for identity threats in Microsoft 365 environments with Huntress Managed ITDR, it's great. It's been doing its job for us so far and has been working. The only thing I would say is that we haven't had too many incidents that have come through, so for us, it's fine.

I would rate this product a 9 overall.

Huntress Managed ITDR is used for threat protection and response for our clients.

The best features in Huntress Managed ITDR are the dashboard, which I quite appreciate. It has a clean and nice GUI that provides a bird's eye view of everything, which is beneficial. The deployment was very quick, taking minutes rather than days.

The human-led investigation and remediation aspect of Huntress Managed ITDR is very important in our operations. It is backed by the same SOC as the other Huntress products, and we are satisfied with that.

In Huntress Managed ITDR, the customization of detections and alert filtering has room for improvement. I am mainly working within Huntress's predefined rules, so more flexibility in tailoring custom filters and rules would be beneficial. This can vary between each client specifically.

I have been using Huntress Managed ITDR for about twelve months.

I have not experienced any downtime, lags, or glitches.

I assess the effectiveness of the twenty-four-hour human-led detection and response for identity threats in Microsoft environments as good. We are a twenty-four-hour service as well, so we have not noticed any discrepancy outside of normal working hours, which is positive.

I would rate the support an eight. I am satisfied with that.

I cannot compare Huntress Managed ITDR with other ITDR solutions as it is the first one we have used.

Huntress Managed ITDR was really easy and very quick to deploy. Because it is a cloud environment, the integration with Azure was seamless.

It took minutes to deploy.

The maintenance of Huntress Managed ITDR is handled by Huntress.

The return on investment I have seen in the past year with Huntress Managed ITDR is probably about twenty percent.

Regarding the pricing for Huntress Managed ITDR, I have not noticed a massive amount of noise on the pricing. We pay monthly.

I have not used the Unwanted Access Detection feature.

I have not used the Shadow Workflows feature.

Our organization does not utilize the Rogue Apps or Zero Auth abuse protection feature; we use it more for compromised credentials and suspicious logins.

I do use the Incident Report Timeline feature and some of the reporting features.

The ability of Huntress Managed ITDR to provide defensible evidence for cyber insurance purposes is somewhat adequate. The reporting is not the best, as it does the job but requires a manual process and bit of digging to get what is needed.

I have not utilized the mass outbound phishing detection feature, as we use a different solution for that.

The advice I would give others looking into Huntress Managed ITDR is that it is a strong product that is easy to implement and fairly priced. I give this product an overall rating of eight.

My main use case for Huntress Managed ITDR is providing security services for our clients.

A quick specific example of how I use Huntress Managed ITDR for security services is that it helps with getting malicious actors out of Office 365 services and applications.

Regarding my main use case, Huntress Managed ITDR mostly helps prevent bad actors from logging in and stealing authentication tokens.

The best features Huntress Managed ITDR offers include immediate response levels and the ability to immediately disconnect bad actors.

The immediate response feature of Huntress Managed ITDR works for me in practice because as soon as we get an email, we assign an engineer to look into it, and it is very accurate.

Huntress Managed ITDR has positively impacted my organization, with our clients being very happy knowing that we are getting on an issue immediately.

Client satisfaction has changed, and they are very happy with our fast response time.

At the moment, I think everything about Huntress Managed ITDR is perfect, and I have no improvements to suggest.

I have been using Huntress Managed ITDR for a little over a year.

I find Huntress Managed ITDR to be very stable.

So far, I assess Huntress Managed ITDR's scalability as pretty easy amongst all the other tools that we use.

The customer service support from Huntress Managed ITDR is very good, and in fact, today they were very fast in getting to my request for further documentation.

I would rate the customer support on a scale of 1 to 10 as very positive, possibly even a 10, based on today's interaction.

I previously used a different solution, as some of our clients use the built-in solution from Microsoft 365, while others we basically send through Huntress Managed ITDR.

I assess the effectiveness of the 24/7 human-led detection and response for identity threats in Microsoft 365 environments as very good because we definitely appreciate the response, it's fast and it locks out anything bad, so once we get the reports, we go with it.

I have not seen a general return on investment, but I will say that the time saved is definitely better because Huntress Managed ITDR does most of the legwork for us.

My experience with pricing, setup cost, and licensing has involved letting the sales team take care of all that, as my focus is only on integration.

Before choosing Huntress Managed ITDR, I was not involved in the testing of other options.

My advice for others looking into using Huntress Managed ITDR would be to definitely give a trial, try them out, see how your customers appreciate it, and I bet that they will love it.

I have no additional thoughts about Huntress Managed ITDR before we wrap up, as everything was good, and I suggest that basically everyone tries it.

I gave this review a rating of 10.

My use cases for Huntress Managed ITDR involve connecting all our devices to Huntress, as it is a managed EDR platform that manages all incidents and alerts for us. Since we are a small team in our organization, we cannot afford a twenty-four-hour SOC in-house, so this is the best platform we found.

One feature I appreciate the most about Huntress Managed ITDR is its integration with Microsoft Defender. That's the best part because most users in our organization have Microsoft Business Premium licenses, so Defender for Endpoint comes along with Business Premium, meaning there is no extra cost. Since we have created policy for Defender for Endpoint, all those alerts and incidents are also managed by Huntress, giving us a dual advantage.

The threat analytics from Huntress Managed ITDR helps provide actionable insights for threat management through their webinars and team reports.

A downside of Huntress Managed ITDR is that some devices show they are not super compatible with the Defender for Endpoint integration. I still see many issues indicating that devices are not compliant due to policy conflicts, and it has been almost a month trying to figure out how to make all devices compliant. That is the main disadvantage I have seen.

Regarding the alerts in Huntress Managed ITDR, they are decent, but they still have lagging features. I would say it is just another simple version of Azure's conditional access policy, and they could add many more features to it.

I've used the solution for almost three months.

I have not seen any lagging, crashing, downtime, or any instability with Huntress Managed ITDR so far.

I have contacted technical support at Huntress Managed ITDR a couple of times when we received alerts, as I wanted to get more information about the basis of those alerts. They are quick to respond and help us explain why Huntress marked an identity in a certain way.

If I were to rate Huntress Managed ITDR support on a scale from one to ten, I would give them a nine.

Positive

I previously used Datto EDR instead of Huntress Managed ITDR, and I found it horrible. I don't want to blame other solutions, but I didn't find it satisfactory.

My experience with the logging mechanisms in Huntress Managed ITDR is that they are simple. The integration with SSO is super seamless.

In terms of current pricing, I feel Huntress Managed ITDR is a bit expensive.

In terms of current pricing, I feel Huntress Managed ITDR is a bit expensive.

Overall, I would score Huntress Managed ITDR a seven, mainly because of the pricing perspective.

The real-time monitoring feature of Huntress Managed ITDR is managed by them as there is no option for self-management.

The automated incident response feature in Huntress Managed ITDR is good, as it provides recommendations and is managed by them twenty-four-seven. I tested it by creating a fake alert, which was captured successfully.

My overall rating for Huntress Managed ITDR is seven out of ten, primarily due to pricing considerations.

We are an MSP. We use EDR and ITDR for our security needs. 

Huntress Managed ITDR's threat analytics are awesome; it provides all relevant information, even information that may not seem relevant but is. 

Huntress Managed ITDR has helped me detect identity threats extremely effectively; Compromised accounts are managed extremely well because we often get sign-ins from unknown locations faster than a client is aware their account is compromised. We can instantly force sign out sessions of the user's accounts and change their password before any damage can be done.

The capability to customize alerts in Huntress Managed ITDR has benefited my organization in managing IT security. With our smaller team, the automated remediation tools and reporting from Huntress save us time, allowing us to prioritize other important tasks beyond just security. While security is crucial, there are other priorities we need to address.

We use automated incident response all the time with Huntress Managed ITDR, and I love it. The time spent per ticket is the best metric to illustrate that. It has significantly reduced the time we spend on each ticket. 

Huntress Managed ITDR helps me with remediation; the recommended remediation and automatic remediation are awesome. It helps with time saving and researching issues. Additionally, it alleviates time spent dealing with issues that arise for clients in general. 

I could literally see the benefits of Huntress Managed ITDR after deploying it. Within 30 minutes, we started receiving alerts of footholds on our clients.

In areas where Huntress Managed ITDR could improve, I would suggest exclusions and the ability to add whitelisting for file types or select files, making it more transparent.

I have been using Huntress Managed ITDR for a year and a half in total.

Huntress Managed ITDR does not have any stability issues.

Regarding the scalability of Huntress Managed ITDR, I would advise not to change anything about it as it works perfectly.

I have never contacted the technical support or customer support of Huntress Managed ITDR because everything is simple and very simplistic to understand and use, even the deployment.

I have used alternatives to Huntress Managed ITDR, such as Acronis Cyber Protect, Trend Micro, SentinelOne, and Webroot. Huntress Managed ITDR is superior to other solutions in every way.

It was very easy. I had it deployed to more than 400 endpoints within ten minutes.

Huntress Managed ITDR requires some maintenance on my end as I need to go in and manually review incidents and alerts. We can process the remediation and automatic remediation, though some incidents require manual intervention as the tool cannot do everything, but it tells you what you need to do.

It's not the worst and not the best; it's a fair price.

I would rate Huntress Managed ITDR a nine out of ten; it's not perfect but very close to it.

My use case is really just for threat detection and response to observe and get more awareness of where our sign-ins are coming from, so we can better protect our login environment.

Implementing Huntress Managed ITDR has improved our business by allowing us to be more proactive with our security posture. It recently identified that people had saved passwords in Word documents. Prior to that, we didn't know that was a practice, so it's now allowing us to get ahead of things and put in appropriate password managers for teams. That's something that will hopefully benefit us in the future.

The continuous monitoring capabilities have been pretty effective in maintaining the security of our endpoints. I've not noticed anything unexpected in terms of something that it hasn't caught but something else has. We did a month-long trial, so we got to get familiar with it before we went truly live with it.

The incident response integration has helped us mitigate security incidents and reduce downtime. It sends alerts that tell us what activity it's managed to detect, such as VPNs and some odd rules in people's mailboxes. The biggest thing has been detecting travel locations where we weren't advised.

Real-time alerts have helped our organization address vulnerabilities promptly, but we don't have the metrics because we don't monitor and track things to that extent. It has allowed us to see what our end users are doing and where they're traveling and to make sure that there's nothing odd going on there.

The best features of the solution are the fact that there are real people behind it who watch the alerts and then escalate as required, and the fact that there is an immediate support team or SOC team behind it if we have any questions. 

It integrates well with our Microsoft environment. It was really easy to get going with it and get the visibility with basically a few clicks. The reporting is good and it's pretty fast as well.

The threat detection feature is working and protecting. It's been detecting unsanctioned VPNs. We've had to investigate somebody that was using a VPN that we weren't aware of. It's been actively working for us for the last month or so.

In my opinion, Huntress Managed ITDR has room for improvement in the speed of some screen refreshing, as it isn't as fast as it perhaps could be. The fact that it caches results is a bit odd for a security product. Other than that, it's a very simple and easy-to-use interface in terms of recommendations and feedback. There's not really much at the moment I would look to change.

It would be nice to have more customization around the reporting, beyond changing the logo and the color scheme, to generate a more executive summary for our board. At this point, that's really nitpicking. In terms of the actual product features, it's been pretty good. I haven't seen if there's a way to create custom alerts and custom rules for identification, but if there was, that would probably be useful as well.

We've just deployed it. Our trial started in May, so it has been close to two months.

I would rate the stability of Huntress Managed ITDR a ten out of ten. We've not had it long enough to see any disruptions, but we haven't experienced any disruptions trying to access it.

I believe Huntress Managed ITDR is scalable, so it's probably a ten out of ten. It should just be a case of adding users, and hopefully, people watch it. Scalability-wise, it should be pretty simple.

Huntress Managed ITDR is protecting about 120 users. In terms of the people that log into it, it's two or three IT admins, but we've got 120 licenses, so it's protecting 120 Microsoft accounts.

My rating on the technical support would be a ten out of ten. They've been very responsive when we have had to use them.

Positive

Using Huntress Managed ITDR wasn't originally on our plan. We were originally just going to use the Microsoft E5 rules within Cloud App Security and some other things. We went with Huntress Managed ITDR when I was looking at the Huntress EDR, and the pricing versus the ease of deployment made it a no-brainer for us. The amount of configuration that Microsoft seemed to require to make it more user-friendly took a lot more effort to get to a similar standpoint. The fact that the ITDR can immediately tie into the Huntress SIEM and protect all licensed accounts with minimal configuration required from us makes it a better option compared to Microsoft.

The deployment of Huntress Managed ITDR took about three minutes. The documentation was really clear. It was basically clicking a couple of buttons to connect it to our Microsoft environment, and then it ingested all of our user accounts and started protecting us. In terms of how long it took to get going, it was really quick.

We're using cloud deployment. As our firm has grown, we've been adopting a more cloud-first position. Given our geographic location with environmental threats such as hurricanes, we've been moving more to the cloud. The implementation of this being as quick as it was for a cloud-hosted system and to get it actively protecting us was far quicker than if I'd had to build something on-premise.

It doesn't require any maintenance from my end so far. It has some automatic cleanup rules, but we haven't had it long enough to see if those have been effective.

It hasn't saved much yet. If anything, it's created more work, but that's because we're now seeing things that we weren't seeing before. In terms of a return on investment for our security posture, it's absolutely paying for itself to ensure that we are better secure compared to what we were without it. From a financial standpoint, I have no idea, but in terms of return on investment for our security, it is worth it and is in my opinion paying for itself with our improved posture.

In terms of pricing, it seemed pretty cheap for us. I think it was two or three dollars a user a month. Given that it wasn't a product we were expecting to buy, it was a somewhat unanticipated cost, but again, the value of it makes sense. I don't know what the other alternative products cost-wise would be, but given what it does, it seems cheap.

I would definitely recommend Huntress Managed ITDR to other users for the ease of getting a high level of service implemented in a very short time frame and the cost of the service for what they seem to be delivering is very good. 

Overall, I rate Huntress Managed ITDR a ten out of ten.

I synchronize every client I have with M365 into Huntress Managed ITDR, and it operates seamlessly. It acts as the M365 cloud counterpart of EDR on physical machines, offering peace of mind by covering both endpoints and the actual cloud tenant. (If you have both products)

Huntress Managed ITDR examines various signals from the M365 tenants. If anything suspicious is identified, their SOC analysts can take a closer look and subsequently take action. 

It's a comprehensive solution covering endpoints and cloud tenants, offering peace of mind. I recognized its benefits immediately, as it provides protection against M365 identity compromises, like admin account breaches.

The product needs further maturity, with some improvements in the user interface. There's a confusing aspect with the escalation options; applying conditions to a specific identity is not immediately visible and requires using a three-dot menu. 

Additionally, the rogue apps feature is in beta and currently lacks functionality.

I have been using Huntress Managed ITDR for less than a year.

I haven't experienced any stability issues, such as lagging or crashing. The system operates reliably.

Scalability is straightforward as it's about linking into the tenant. Whether there are ten users or three hundred, it attaches to the Microsoft tenant, making it effortless to scale.

Their technical support is great and knowledgeable. Although they primarily handle ITDR communications through chat, they made an exception and provided a call for a critical situation to walk me through the remediation process.

Positive

I have not used any alternatives to Huntress Managed ITDR.

The initial setup was very easy. My account manager guided me through the process, and everything was set up in one afternoon. A product engineer was on hand in case I had any questions.

The implementation involved just me, which is perfect since I am the one managing this.

Almost immediate. I purchased this for peace of mind across my M365 tenants, and that's exactly what I got.

The pricing is satisfactory. Compared to other companies, Huntress keeps costs reasonable, offering 24/7 vigilance without price gouging. I appreciate their affordability given the comprehensive service provided.

Overall, I rate Huntress Managed ITDR a nine out of ten. 

I look forward to seeing more maturity in the product and a few user interface adjustments.

I use Huntress Managed ITDR for 365 protection, monitoring log run events, security, and abnormal logons.

The centralized management with the EDR and ITDR is beneficial. It's all in the same single pane of glass management, which is particularly valuable. I also use it for 365 protection, monitoring log run events, security, and abnormal logons.

More in-depth reporting could be beneficial for the solution.

I have been using it for a couple of years.

I have never experienced downtime with Huntress Managed ITDR, so it's fully stable.

The solution is easy to scale. I've never had limitations on scaling or performance issues.

The technical support is fantastic. They are super fast, and I am happy with the support.

Neutral

I have not used any different solutions before. Huntress Managed ITDR was the first product of its type that I used.

The initial setup was very straightforward. Since there's no agent to deploy, it was an easy setup process.

I include ITDR in our plan, so I definitely make money off of it.

The pricing of ITDR is reasonable.

I didn't investigate other products much. I rolled into ITDR from EDR as Huntress added that functionality.

New users should communicate with Huntress, as it is their product and a cloud platform. Other than that, it is a straightforward product. I rate the overall solution as a ten out of ten.