Huntress Managed ITDR Reviews & Product Details

What I like most is that, like the EDR, it’s managed. Huntress’s SOC looks at suspicious sign-ins and account activity and only escalates what’s real. We aren’t digging through Entra sign-in logs trying to decide whether a login from another country is a threat or just a traveling employee. It's easy to deploy, running it with EDR gives us a single dashboard, and it catches the sneaky stuff like malicious inbox rules. Review collected by and hosted on G2.com.

It’s a newer product than the EDR, so it still feels like it’s maturing. There’s less configurability than I’d like, such as tuning detections, setting different response behavior per client, and building out reporting. The SOC does most of the heavy lifting, but sometimes I’d like more control over what’s flagged and how. Review collected by and hosted on G2.com.

I like being able to see key information quickly in the dashboard, both for an organization and across all our accounts in one place. Time is valuable to us, and it helps me understand what we need to address. Setup was very easy, and I liked having onboarding videos available before we started. They walked us through best-practice settings as a partner and for individual accounts, and I prefer walkthrough videos to documentation. Review collected by and hosted on G2.com.

Sometimes there’s quite a lot of information on the main dashboard, both good and action required. I’d like to be able to see just the action-required items, like users without MFA or users suspected of logging in from a different country. Seeing all the information in one place is useful sometimes, but it would also be good to have a dashboard just for what needs attention. Review collected by and hosted on G2.com.

I love the additional layer of protection and visibility it provides across our identity environment. It helps us identify suspicious activity, potential account compromises, and identity-based threats that might otherwise go unnoticed. I especially appreciate the proactive monitoring and the combination of automated detection with experienced security professionals who help investigate and respond to potential issues. It gives us greater confidence that we're protecting not just our endpoints, but also the user accounts and credentials that are critical to our organization and the clients we manage. Review collected by and hosted on G2.com.

Honestly, there isn't much to dislike about Huntress Managed ITDR. As with any security platform, there is always room for additional visibility, customization, and ongoing feature enhancements. It can take some time to become familiar with the alerts and understand how to best leverage all the available capabilities, but overall, our experience has been very positive. The value and added security it provides far outweigh any minor areas for improvement. Review collected by and hosted on G2.com.

The main upside is that it’s designed to work seamlessly with our Microsoft Enterprise plan, and it helps keep our staff and customers safe beyond what we get from EDR and Defender alone. It’s also a very affordable extension to EDR products, which is why we’ve adopted it across our internal workflows. From the reseller side, we’re seeing ITDR become a high-demand solution that both prospects and customers are actively asking for. And as a managed IT MSP company, that growing demand is opening up many new opportunities for us. And, as Huntress hosts and manages the platform, every new endpoint and customer being set up allows for the smoothest of implementations with very little configuring. The numerous view features in the dashboard, one click access to customer support, means checking in on our companies footprint and our clients footprint every day, while getting daily and live updates on activity, this makes using Huntress ITDR with EDR and Windows enterprise systems enjoyable. Review collected by and hosted on G2.com.

The dashboard is not friendly on older apple iPhone, which may be an issue that fades its self out as hardware in the market gets faded out. Review collected by and hosted on G2.com.

I use Huntress Managed ITDR to protect our own and our clients’ Microsoft 365 accounts. I like that it proactively monitors for suspicious sign-ins, compromised accounts, and malicious inbox rules, with the Huntress SOC team investigating 24/7 and responding when something looks wrong. It adds an important layer of identity protection without us needing to watch every tenant ourselves, so we can be proactive rather than reactive. What I like most is the speed of response: if an account looks compromised, Huntress can quickly contain it by disabling the account or revoking sessions instead of waiting for us to pick up an alert. I also value the peace of mind of knowing our tenancy is monitored. ITDR is quick and simple to set up, has no agent to deploy, and connects directly to M365. Malicious inbox rule detection is useful, since rules created by bad actors can go unnoticed for a long time, and I value detection of unusual sign-ins like session hijacking or logins from unexpected locations or VPNs. The setup was super easy and quick, which was ideal. Review collected by and hosted on G2.com.

I’d like better reporting, with more in-depth information I can show and tell customers. Review collected by and hosted on G2.com.

Since we already had so much confidence in Huntress for our endpoints, adding their ITDR for Microsoft 365 was a no-brainer for both our internal setup and our customers. The recent addition of Google Workspace support is a brilliant update to the platform, allowing us to extend that 24/7 SOC coverage across all our cloud identities. They constantly catch sneaky things like unusual logins or hidden inbox rules that standard alerts miss. We have complete trust in them to have our backs. Just like with their other products, the vendor relationship is top-tier - they put on great roadshows, go the extra mile for partners, and we know they'll be there when we need them most. Review collected by and hosted on G2.com.

It's tough to fault them, but if I have to put something down: you occasionally spot a minor bug or quirk in the dashboard. However, their development team is incredibly active. We see updates rolling out constantly, and the platform is always changing for the better, so those tiny hiccups never stick around for long anyway. Review collected by and hosted on G2.com.

I like the extra layer of security Huntress Managed ITDR gives us around user identities and accounts. Having Huntress help monitor and investigate suspicious activity makes it easier for our team to spot genuine threats without having to manually investigate everything ourselves. Review collected by and hosted on G2.com.

There isn’t much I dislike overall. If anything, some alerts could provide a little more context upfront, which would make it quicker to understand exactly what has happened and what action is required. Review collected by and hosted on G2.com.

As an MSP, we appreciate having an additional layer of protection focused on our clients’ user accounts and identities. Having a managed team investigate suspicious activity helps reduce the burden on our technicians and gives us greater confidence in protecting our clients. It also helps us explain the value of identity security to organizations that may assume their existing email security is enough. Review collected by and hosted on G2.com.

I would like more flexibility and clearer visibility around billing for suspended or inactive accounts, particularly for Google Workspace clients. These accounts can add up, and it would be helpful to make it easier to identify which accounts need protection and manage licensing accordingly. More straightforward reporting would also help us explain those costs to clients. Review collected by and hosted on G2.com.

Having an ITDR that’s part of the same tooling as the EDR is a must for me.

The signals generated by the EDR and ITDR are correlated, which gives the SOC team a clearer understanding of what happened, how it happened, and how far it has spread.

It’s very easy to implement: you simply add the tenant as an integration for the customer, and it does its thing in the background.

Navigating the solution is just as straightforward as the EDR solution.

I also know this product is backed by the same Support team as the EDR, so I feel like I’m in safe hands.

I use this product daily and I’m very happy with it. Review collected by and hosted on G2.com.

I haven't found anything I don't like about Huntress Managed ITDR Review collected by and hosted on G2.com.

Unlike other tools that provide ITDR services, Huntress ITDR doesn’t feel like a black box. It gives clear context on why alerts are generated, and account compromise is typically caught quickly, with the scope of the incident depicted clearly. The ability to allow/block certain countries/VPNs is great, and the escalation process for this works well. The new ITDR dashboard is also very informative.

Some other tools, like Petra, are a bit faster and more comprehensive when it comes to incident coverage. They also take more of a 'black box' style approach, and I've had false positive incidents generated for my own client environments after generating a TAP. Based on my conversations with the ITDR PM at Huntress, improvements are coming quickly and should bring Huntress up to parity with competitors. Features that are currently missing—like pulling malicious emails from inboxes across your client base—are on the roadmap and expected soon.

Implementation is quick and easy, support is great to work with in the event of an incident. Review collected by and hosted on G2.com.

The downsides didn't exist until trialing some competitors - the incident timeline for Petra still generates more quickly and has more comprehensive data than Huntress. Petra also allows for faster incident remediation in the portal via password resets, mfa method deletion, etc., and Huntress is adding more and more remediation features to achieve feature parity. Most important thing missing IMO is the ability to remove malicious emails detected from other incidents. Review collected by and hosted on G2.com.