The standout moment for us was when one of our accounts was compromised right after our trial period had ended. Despite the trial being over, the Huntress SOC team stepped in anyway — they detected the compromise, disabled the affected account, and handled remediation without us having to escalate or negotiate access first. That level of follow-through, even outside a paid engagement, said a lot about how they operate. It gave us real confidence that during an active incident, we'd have people actually watching and acting, not just a dashboard full of alerts we'd have to triage ourselves. Review collected by and hosted on G2.com.

Limited customization. detection logic is largely Huntress-managed; less flexibility to write your own rules compared to something like MDE custom detections.

Critical alerts get fast, hands-on attention from the SOC, but lower-severity alerts don't always get the same level of follow-up. Review collected by and hosted on G2.com.

I like the visual map; it's great for understanding how things are laid out. Huntress Managed ITDR definitely offers an easier and more encompassing interface compared to Native Microsoft Arts. It's simple to set up, with a quick, literally five-minute setup. Just four or five clicks, and we're done, which I think is perfect. It's also already picked up a couple of issues like impossible travel, just from the way it presents the information. Review collected by and hosted on G2.com.

I find it problematic that there's no way to cancel somebody's access or revoke it easily. Also, identifying identities without MFA and printing that list is not possible, which would be nice to have. It would be helpful if there were new actions right from the screen to enable MFA when it's disabled, instead of having to navigate elsewhere. The boards could be more functional; when something risky is detected, it should take me directly to where I can address it, like turning MFA on or off. Additionally, it'd be beneficial if the system could identify risky applications from the list I have. Review collected by and hosted on G2.com.

It’s reassuring to know that someone is watching over all identities. This has proven itself time and again for both our clients and our own team. The support is consistently excellent, and the reporting is also great. Review collected by and hosted on G2.com.

I wish there was a way to export the timeline report so we don't have to manually create our own incident report. If they had a way to export it, that would be even better. I copy paste right now but an export function would be great for all the reporting. Review collected by and hosted on G2.com.

I like that Huntress Managed ITDR adds an extra layer of defense and notification that we can't see or get notified on day to day, creating a defense in-depth mechanism for our 365 environments. The platform's setup is simple, and having onboarding with the actual Huntress team is great. It's comforting to know there's a trained organization and staff looking after our client's identity, especially since we generally don't as much threat hunting capabilities due to resources. The inclusion of both AI and actual live human analysts helps ensure our environment is protected, notifying us of potential red flags and even blocking accounts deemed breached on our behalf. It makes us feel comfortable when we're not online, knowing our systems are in capable hands. The platform works great overall. Review collected by and hosted on G2.com.

There's a bit of fine tuning when you first set up a new organization, which is mainly just more than likely just 365 identity side of things. Review collected by and hosted on G2.com.

The most helpful part of ITDR, in my experience, is the automated security measures that lock out users when an incident occurs. Huntress also provides clear feedback on the next steps to take, helping ensure the user stays secure. Review collected by and hosted on G2.com.

The least helpful thing about ITDR is that it can make some clients less likely to pay attention to phishing emails, since they know that if they make a mistake, the service will stop the attack. Review collected by and hosted on G2.com.

I like being able to view all tenant information in one place, instead of having to log in to each tenant individually. The interface also feels cleaner and easier to navigate than the Microsoft Security portal.

I primarily use Microsoft Defender, which is Huntress' primary integration, so that made setup very quick and painless.

The platform pulls information relatively quickly, and doesn't seem to have much of a hit on performance.

I do wish that there wasn't a 50 unit minimum, as it can be pricey for newer service providers, such as myself, that may not have that sort of demand.

Onboarding is quick and painless, and the support/account management team is always quick to respond.

I have yet to use any of the Huntress AI features, but that's something I plan on playing around with in the future, Artificial Intelligence/Automation is the future. Review collected by and hosted on G2.com.

The only complaint I have is the 50 unit/license minimum. It would be nice to have exceptions made for newer service providers that may not have that demand yet... Review collected by and hosted on G2.com.

The UI is simple to understand, the integration with M365 is super simple to setup. This makes the onboarding of new customers super simple, login with your global admin account and approve. The detection performance is super quick. The pricing tiers are nice and you can easily safe money but committing to a higher tier. Review collected by and hosted on G2.com.

The email templates are inconsistent in the entire platform.

Not yet seen an artificial intelligence agents to help you understand warnings better or help you with solving preventing the next issue Review collected by and hosted on G2.com.

So far the ease of use in onboarding has been a real plus. Having alerts for suspicious logins has also been an eye opener for us and the cost was very reasonable for our environment. We've been using it for a few months and looking forward to seeing the results in the future with it's analytics and AI functionality. Review collected by and hosted on G2.com.

So far we've only used it for a couple of months so it may be too early to tell. Wish there was a little more customization if possible, but we'll know if this is an issue or not in the future. Review collected by and hosted on G2.com.

I like how quickly Huntress Managed ITDR detects and intervenes when an account is compromised, usually within a few minutes. The historical alert functions are also helpful. Additionally, the initial setup was very easy. Review collected by and hosted on G2.com.

They have incidents and escalations as separate areas. However, the escalations area functions quite awkwardly and requires manual involvement but isn't very intuitive. Also, if an escalation is not addressed it will hide additional escalation notifications from that client for that escalation type which is not good. Review collected by and hosted on G2.com.

Huntress has become one of the most valuable tools in our MSP stack. The managed EDR component is the standout feature - rather than just throwing alerts at you, the Huntress SOC team actively investigates detections and delivers actionable incident reports almost immediately. with clear remediation steps. For a small MSP team, that 24/7 human-backed triage is a genuine force multiplier.The multi-tenant portal is well thought out. Managing detections, agents, and reporting across multiple clients from a single dashboardis clean and intuitive, and the per-organisation breakdown makes it easy to stay on top of each client's posture without context-switching between separate logins. The integration into our PSA is almost immediate and seamless, and setup was smooth with no issues. We also recently deployed the ITDR package and the automated checks were compeltely extremely quickly.

From a value perspective, it punches well above its weight for the price point. Compared to trying to staff equivalent detection and response coverage internally, the ROI is obvious. Review collected by and hosted on G2.com.

There isn't much to complain about. Onboarding new endpoints is straightforward, though it can take a little time to get agents fully deployed across larger client environments. Not a blocker, just something to plan for during rollout. The portal is clear, but compared to some other products, flows could use some refinement. Review collected by and hosted on G2.com.