I like that Huntress Managed EDR is clean, simple, and easy to use. It has a superb alert system, and the support is fantastic, which provides peace of mind for both us and our customers. The management interface is easy to navigate, allowing me to change between customers easily, and notifications and escalations are presented sensibly. Deployment to our customers is nice and simple, and we appreciate being able to view endpoints and set policies easily. The fact that it just works really well is a big plus. Review collected by and hosted on G2.com.

It would be nice if Huntress Managed EDR had the ability to disable an already existing antivirus product. Review collected by and hosted on G2.com.

Huntress dashboard is extremely intuitive, and agents are easy to deploy. Huntress has alerted on many things that our previous security suite didn't even identify. It's great that it monitors both endpoints and M365 identities. Pricing is negligible and integration is smooth. Support is prompt with responses, informative and knowledgeable. Performance is fantastic from day one. Review collected by and hosted on G2.com.

The only thing I've found that was less than satisfactory was the inability to deploy on older machines. Old Macs and Windows XPs that some of our clients had, but other than that everything has been fantastic. Review collected by and hosted on G2.com.

We've been using Huntress for a number of years now, if it weren't for their reporting, I would be wondering what am I paying for. If your clients aren't compromised, don't expect to hear from them. In the past year, they, apparently, wanted to convey to their client-base that they are on guard, so they ran a LOW LEVEL scan of all clients. The result: Many of our clients are using the wrong tool to protect their passwords, so we sent out letters to them advising them of better options. Now, we have more users getting onto password managers instead of using their Word, Excel or notepad to store confidential details. Recently, we experienced a phishing ordeal on one of our client's machines. We had signed up for the Huntress SIEM and were using SentinelOne for our EDR. When S1 detected the presence of an RMM utility that we did not use, it was flagged because it represented the presence of an anomaly. Since S1 was reporting to the Huntress SIEM, we were notified, both through Huntress, SentinelOne and our PSA tool, AutoTask. We called up the client and asked if they had noticed any strange or unusual behavior on their machine recently. The only reply we got was the mention of an invitation from someone unexpected. As it turned out, that person was compromised and their email sent the payload to our client that, upon clicking, launched ScreenConnect. ScreenConnect is typically used by ConnectWise RMM for remote support purposes on a totally legitimate implementation; however, this particular implementation was not condoned, but subversive. S1 and Huntress quarantined / killed the service and isolated the machine to reduce the chance of spread. While it was isolated, we were able to clean up the machine remotely and restore access soon thereafter. Needless to say the client was greatly relieved. Both SentinelOne and Huntress are winners in our eyes after this episode. We found Huntress' support was excellent, kept us in the loop, worked with us in a timely and coordinated manner to get the client back online. Review collected by and hosted on G2.com.

Although Huntress gives us statistical feedback on its findings, it remains silent until called upon. You may wonder if it even does something till it's needed. This is a pro and a con - providing doubt, but with their reports, confirming activity. BTW, their reports are amongst the best of all my vendors. Yet when they need to act, they do it fast and they do it right. Review collected by and hosted on G2.com.

Great visibility and notifications. It’s easy to use, the integration scope is solid, performance is good, and the support has been very good as well. Review collected by and hosted on G2.com.

There’s nothing to dislike—the platform is great, and the functionality works really well. Review collected by and hosted on G2.com.

After running it for a couple of years, thankfully it still hasn't found any nefarious issues, but I am pleased to have the extra set of eyes watching my clients devices. Review collected by and hosted on G2.com.

I am still really happy with the software and company. It would be nice if SIEM was included in the price like it is with ITDR though. Huntress is improving all of the time, but a lot of the improvements seem to be additional modules at an extra cost. For example, it would have been nice for ESPM to be part of EDR and ISPM to be part of ITDR,but I appreciate that you need to make a profit. Review collected by and hosted on G2.com.

I enjoy the convenience of automated and recommended remediations and the ease of access to human customer support with Huntress Managed EDR. It's nice knowing exactly what I'm looking for when investigating, which saves a lot of time during RMM dependent investigations. The managed team having my back for RCA and extensive investigations makes the service nearly invaluable to me. I find the initial setup very simple, as the installation scripts are bound to our RMM, making deployment to individual endpoints easy. I love the support and assistance provided by Huntress Managed EDR, which is why I'm very likely to recommend it to others. Review collected by and hosted on G2.com.

Some granularity would be nice in terms of incident timelines, often signals aren't brought to our attention on endpoints until the incidents have already been handled. Having a chance to review potentially unfolding executables would make life very nice. For instance, when we had a machine alert on potential remote code execution, the signals created an extensive timeline. It would have been nice to be involved on that timeline from the first signal onwards. Review collected by and hosted on G2.com.

I really like the visibility Huntress Managed EDR gives us into our Microsoft environment. It quickly surfaces potential compromises, provides thorough reporting, and lets us see things at a more granular level without drilling deep into Microsoft Purview. The phenomenal customer service and response times from their team are also impressive, typically under 10 minutes from incident recognition to initial remediation. Additionally, the setup was very easy, basically plug and play, with support assisting us with any small items. Review collected by and hosted on G2.com.

I think Huntress Managed EDR could improve on the ability to get the data into a dashboard view. It would be great if this could be shared with users who do not have access to the Huntress portal. Review collected by and hosted on G2.com.

The interface is pretty easy to use and also offers auto-remediation options. EDR Tamper Protection was a new addition to the features this year. Good integration with my other systems - Autotask Review collected by and hosted on G2.com.

If another AV is installed on the computer. Huntress is disabled automatically. Review collected by and hosted on G2.com.

I have years of experience using Huntress Managed EDR. It's a superior EDR with aggressive monitoring and real-time threat analysis. I appreciate the excellent mitigation recommendations, low footprint, fluid UI, integration with my RMM, and the agents' follow-up. The chat is quick and decisive, which I find really valuable. What I like most about Huntress Managed EDR is the people. They are a step above any other EDR team I have worked with. When I call the number, I talk to a person, period. I have never waited more than 1 minute for human assistance. The key for me is the Human element. Their people get involved and use their professional skills to look at threats. They do a detailed review, and it shows in concise communications. I also have a funny story about a false positive on my workstation. Ask me about it! Review collected by and hosted on G2.com.

I’d like the ability to suspend protection for controlled troubleshooting. Right now, I have to uninstall the product to do that. It’s a double-edged sword: if I can’t disable it through the UI, then it’s also that much harder for an attacker to do the same. Review collected by and hosted on G2.com.

Huntress Managed EDR makes it straightforward for SMBs to secure their client environments. Deployment and uninstallation are both quick and painless. Huntress integrates smoothly with Defender and gives you clear visibility into Defender configuration and detections across environments, while also alerting you to AV events that need remediation.

In the past, I ran into issues where some Defender events were reported as blocked but weren’t; that appears to be resolved now. Process Insights also makes it easy to keep an eye on malicious or suspicious processes in your environment and search through them, while the Huntress team handles the actual threat hunting for you.

Even with another EDR tool in place, I sleep better at night knowing Huntress has eyes on my environments. It also helps that support is responsive, and the dev team is very helpful whenever you need to work with them. Review collected by and hosted on G2.com.

Compared to more robust tools on the market, Huntress is lacking a bit as far as network monitoring utilities go. The external recon feature is great, but insight into other traffic would be helpful.

Two complaints: first is how they handle Rogue RMMs/RATs. They've got an escalation feature to alert you of things like this, but it's not used. They show you new screenconnect hosts and instances on the dashboards, but you're not alerted on them. Block functionality for these types of software is being rolled into their RMM Guard, maybe part of ESPM, a new offering, or maybe RMM Guard is part of EDR/MDR now. Not sure yet. Hopefully they make some improvements here.

2nd complaint is 'preliminary investigation reports'. Endpoints are isolated but you're not provided info as to why until the investigation is completed. Threat signals may not even be in the portal at this time. delays are 15-40 minutes. It may be a false positive, maybe not. These really should be fixed. Review collected by and hosted on G2.com.