Huntress Managed SIEM Reviews

My main use case for Huntress Managed SIEM is setting up security logging for our firewalls. My primary purpose is to set them up for compliance reasons, and in addition to that, it is good to use when analyzing situations in which an endpoint device may have been compromised, having that additional data there to get information for further review.

Huntress Managed SIEM has positively impacted my organization primarily by helping us help our customers achieve the compliance levels at which they are trying to achieve, and it also gives us additional information when we are reacting to security events that are presented from Huntress's SOC.

A specific example of how having that extra information from Huntress Managed SIEM has helped me respond to a security event or achieve compliance is that it has become a mandatory requirement for our customers with CMMC to have data log retention, and Huntress Managed SIEM allows that functionality.

The best features Huntress Managed SIEM offers include the wide variety of ways in which the SIEM can gather source materials, how long the data can be stored for, the volume of storage, and the ease of use of the queries using the AI search function.

The AI search function has simplified the ability to search for syslog events; prior to the AI feature, I would have had to use Google to build the ESQL queries needed to gather the information, whereas it is now nice to be able to have it inside of the platform.

I have not run into a situation where there has been a problem, and even when I have reached out to customer technical support, they have been able to immediately address any problems that I have encountered.

Huntress Managed SIEM's scalability is fine and works great, as we have many customers already in the platform.

The customer support is excellent.

The advice I would give to others looking into using Huntress Managed SIEM is to review all relevant data and help guides before deployment. I would rate this product a 9.

My main use case for Huntress Managed SIEM is SIEM. I use Huntress Managed SIEM in my organization to monitor firewalls for all my customers. Day-to-day, that process mostly involves looking for alerts. My setup and workflow are straightforward without anything unique to add.

The best features Huntress Managed SIEM offers are real people looking at the alerts. Having real people reviewing the alerts compared to automated systems gives me confidence and peace of mind. Huntress Managed SIEM has positively impacted my organization because we did not have anything before and now we do. The difference that has been made is evident in that the alerts actually get picked up on.

Huntress Managed SIEM can be improved by adding the ability to have multiple endpoints delivering SIEM log collectors to a single cloud agent. There are no other improvements needed for Huntress Managed SIEM beyond what I have mentioned.

I have been using Huntress Managed SIEM for six months.

I would rate Huntress Managed SIEM a 10 out of 10. I give it a 10 because it is good.

Regarding Huntress Managed SIEM's AI capabilities, I have not used them, so I am not sure about their effectiveness. I also have not used Huntress Managed SIEM's AI features to assess their accuracy and reliability of output.

My advice to others looking into using Huntress Managed SIEM is to do it.

We use it for log collection on customers that have compliance requirements.

The single pane of glass management with the other security products we use from Huntress is incredibly valuable. It allows us to manage multiple Huntress products in a central place, and we don't have ten different portals; we have one.

There should be better exclusions of log types and the ability to exclude specific types of logs that might be using a lot of data.

I actually just started using it. It's a fairly new product in our company, and I'd say it's been about a month.

It's been stable.

It's a cloud SaaS product, so I would assume it's scalable. I've never run into an issue with it.

We switched from Total DYL. Price was part of the reason, however, moving everything under that single product was incredibly valuable.

The initial deployment was easy. I'm not sure if it uses the same agent as the EDR or if it's a separate agent, however, our security person who deployed it said it was super easy to deploy.

It was just us, no third party was involved. The deployment was a one-person job.

I think the pricing for SIEM is good.

I advise you to utilize Huntress as a resource. Huntress is a great company and incredibly helpful with deployment. Some software vendors are not helpful, leaving you out on an island. Huntress is incredibly helpful. 

On a scale from one to ten, I would rate SIEM an eight.