The standout moment for us was when one of our accounts was compromised right after our trial period had ended. Despite the trial being over, the Huntress SOC team stepped in anyway — they detected the compromise, disabled the affected account, and handled remediation without us having to escalate or negotiate access first. That level of follow-through, even outside a paid engagement, said a lot about how they operate. It gave us real confidence that during an active incident, we'd have people actually watching and acting, not just a dashboard full of alerts we'd have to triage ourselves. Review collected by and hosted on G2.com.

Limited customization. detection logic is largely Huntress-managed; less flexibility to write your own rules compared to something like MDE custom detections.

Critical alerts get fast, hands-on attention from the SOC, but lower-severity alerts don't always get the same level of follow-up. Review collected by and hosted on G2.com.

I really appreciate the alerting from Huntress Managed ITDR. It's very informative and provides simple explanations along with proposed solutions that aren't overwhelming. This really helps our level one techs understand what to do in case of a threat or breach. The 24/7 SOC is incredibly valuable because it means we don't have to investigate ourselves; the Hunter SOC handles it. This takes preventative measures or gives us detailed alerting on actions needed to protect our clients. Pairing RTDR with the Microsoft 365 Log Analyzer really enhances the threat landscape and helps protect our clients, plus it gives us time back since we're not managing it all ourselves. The initial setup was also very easy, with the Huntress team helping onboard us and providing training, which I found very useful. Review collected by and hosted on G2.com.

There's nothing that I can see being improved with Huntress Managed ITDR. Just continuously maybe enhancing their Microsoft 365 changes that Microsoft are making would be good if they can notify us on that. Review collected by and hosted on G2.com.

I like the visual map; it's great for understanding how things are laid out. Huntress Managed ITDR definitely offers an easier and more encompassing interface compared to Native Microsoft Arts. It's simple to set up, with a quick, literally five-minute setup. Just four or five clicks, and we're done, which I think is perfect. It's also already picked up a couple of issues like impossible travel, just from the way it presents the information. Review collected by and hosted on G2.com.

I find it problematic that there's no way to cancel somebody's access or revoke it easily. Also, identifying identities without MFA and printing that list is not possible, which would be nice to have. It would be helpful if there were new actions right from the screen to enable MFA when it's disabled, instead of having to navigate elsewhere. The boards could be more functional; when something risky is detected, it should take me directly to where I can address it, like turning MFA on or off. Additionally, it'd be beneficial if the system could identify risky applications from the list I have. Review collected by and hosted on G2.com.

It’s reassuring to know that someone is watching over all identities. This has proven itself time and again for both our clients and our own team. The support is consistently excellent, and the reporting is also great. Review collected by and hosted on G2.com.

I wish there was a way to export the timeline report so we don't have to manually create our own incident report. If they had a way to export it, that would be even better. I copy paste right now but an export function would be great for all the reporting. Review collected by and hosted on G2.com.

I really like the combination of automated incident response and human-led threat hunting that Huntress Managed ITDR provides. It gives us enterprise-grade 24/7 identity security without needing to build our own SOC. The automation ensures immediate containment when a credential compromise happens, while human threat hunters investigate to eliminate false positives. This approach protects our clients around the clock without overwhelming our internal team. Additionally, the initial setup was extremely easy, with M365 integration using a quick OAuth consent process and local AD setup involving just deploying the standard agent. Review collected by and hosted on G2.com.

I think Huntress Managed ITDR could improve by expanding its native integrations beyond just Microsoft platforms to include others like Google Workspace and Okta. This would give our team complete identity visibility. In terms of reporting, I'd appreciate more customizable options for executive-level reports, like white-labeled PDF quarterly business review reports that include executive risk scores and trend graphs. This enhancement would save us hours when demonstrating value to our clients. Review collected by and hosted on G2.com.

I like that Huntress Managed ITDR adds an extra layer of defense and notification that we can't see or get notified on day to day, creating a defense in-depth mechanism for our 365 environments. The platform's setup is simple, and having onboarding with the actual Huntress team is great. It's comforting to know there's a trained organization and staff looking after our client's identity, especially since we generally don't as much threat hunting capabilities due to resources. The inclusion of both AI and actual live human analysts helps ensure our environment is protected, notifying us of potential red flags and even blocking accounts deemed breached on our behalf. It makes us feel comfortable when we're not online, knowing our systems are in capable hands. The platform works great overall. Review collected by and hosted on G2.com.

There's a bit of fine tuning when you first set up a new organization, which is mainly just more than likely just 365 identity side of things. Review collected by and hosted on G2.com.

The most helpful part of ITDR, in my experience, is the automated security measures that lock out users when an incident occurs. Huntress also provides clear feedback on the next steps to take, helping ensure the user stays secure. Review collected by and hosted on G2.com.

The least helpful thing about ITDR is that it can make some clients less likely to pay attention to phishing emails, since they know that if they make a mistake, the service will stop the attack. Review collected by and hosted on G2.com.

I like being able to view all tenant information in one place, instead of having to log in to each tenant individually. The interface also feels cleaner and easier to navigate than the Microsoft Security portal.

I primarily use Microsoft Defender, which is Huntress' primary integration, so that made setup very quick and painless.

The platform pulls information relatively quickly, and doesn't seem to have much of a hit on performance.

I do wish that there wasn't a 50 unit minimum, as it can be pricey for newer service providers, such as myself, that may not have that sort of demand.

Onboarding is quick and painless, and the support/account management team is always quick to respond.

I have yet to use any of the Huntress AI features, but that's something I plan on playing around with in the future, Artificial Intelligence/Automation is the future. Review collected by and hosted on G2.com.

The only complaint I have is the 50 unit/license minimum. It would be nice to have exceptions made for newer service providers that may not have that demand yet... Review collected by and hosted on G2.com.

The UI is simple to understand, the integration with M365 is super simple to setup. This makes the onboarding of new customers super simple, login with your global admin account and approve. The detection performance is super quick. The pricing tiers are nice and you can easily safe money but committing to a higher tier. Review collected by and hosted on G2.com.

The email templates are inconsistent in the entire platform.

Not yet seen an artificial intelligence agents to help you understand warnings better or help you with solving preventing the next issue Review collected by and hosted on G2.com.

So far the ease of use in onboarding has been a real plus. Having alerts for suspicious logins has also been an eye opener for us and the cost was very reasonable for our environment. We've been using it for a few months and looking forward to seeing the results in the future with it's analytics and AI functionality. Review collected by and hosted on G2.com.

So far we've only used it for a couple of months so it may be too early to tell. Wish there was a little more customization if possible, but we'll know if this is an issue or not in the future. Review collected by and hosted on G2.com.