The SIEM its self is great aggregating logs from all sorts of sources and piping it to there soc team is perfect for the integrations we have and is flexible across all sorts of environments. Review collected by and hosted on G2.com.

The only thing lacking is the ability to open each event and have short cut buttons to visit the respective devices page in huntress for faster work flow Review collected by and hosted on G2.com.

I love the feature where Huntress Managed SIEM handles partial remediations for incidents depending on the level, which is very, very useful. I also like the support; they really get back to you usually the same day, if not the next day, which is the quickest I've dealt with compared to most service providers who might take longer. Their whole user interface is very easy to use, especially when searching between incidents, identities, or collected files. I also really like the ITDR services, which are so helpful. How information is presented is fairly helpful and useful as well. Review collected by and hosted on G2.com.

The queries, make it similar or better than splunk and you're golden. Review collected by and hosted on G2.com.

Deployment is fast and setup is straightforward compared to traditional SIEM solutions. The management is very easy through its centralized UI and it is easy to contact their support during incidents. They will have automated phone calls to specified staff for top priority incidents which is incredibly helpful for rapid response. Review collected by and hosted on G2.com.

The integration library is limited compared to enterprise SIEM platforms, which restricts its use in complex environments. This limits the use cases to SMB/SME. Larger enterprises often have complex environments that need more special rules that cannot be added to Huntress. Review collected by and hosted on G2.com.

What I like best is that it’s managed for us and doesn’t require constant attention from the helpdesk team. It’s reassuring knowing security monitoring is being handled in the background and that we’re only alerted when something genuinely needs action. It keeps things simple, reduces noise, and fits well alongside our day-to-day support work. Review collected by and hosted on G2.com.

Huntress does not backwards sync betweel Halo CRM for the tickets / tasks. Review collected by and hosted on G2.com.

I love how easy it is to actually use Huntress Managed SIEM day to day. The alerts are clear, the reports make sense, and the Huntress SOC team adds a lot of value with their follow-up and context. It’s not just another tool throwing alerts at you, it’s a managed service that feels like a real extension of our team. Review collected by and hosted on G2.com.

The only small gripe I have is that setting up some event sources can be a little clunky at first, but once it’s in place, it runs great. Review collected by and hosted on G2.com.

What I like best about Huntress Managed SIEM is how it brings enterprise-grade visibility and detection capabilities into a simple, affordable managed service. The onboarding was quick, and Huntress’ team handled most of the heavy lifting for log collection and correlation. Their “Smart Filtering” dramatically cuts down on alert noise, so we only see meaningful and actionable events. Review collected by and hosted on G2.com.

Because it is a fully managed service, you don't have the ability to adjust every rule or alert condition on your own. This is the compromise you make in exchange for not having to handle the maintenance of your own SIEM. Review collected by and hosted on G2.com.

Huntresse Managed SIEM is a great bang for your buck. To get a Managed SIEM tool that we can scale out to our customers is great. The fact it leverages the existing EDR tool to pull log information is great and saves us the hassle of having another appliance onsite to just be dedicated to SIEM. Review collected by and hosted on G2.com.

The only downside I can think of is the need of the EDR tool for SIEM. It isn't really a downside in my opinion. The Huntress EDR has been doing wonders for us, I would imagine if you are using EDR you would logically use Huntress SIEM as well. Review collected by and hosted on G2.com.

I find Huntress Managed SIEM highly valuable for its ability to store seam logs, event logs, and provide twenty-four-seven SOC monitoring. I appreciate the SOC center staffed with qualified individuals who review logs effectively, ensuring the best outcomes for our clients. This continuous monitoring and filtering help us focus only on the events that actually require attention, which streamlines our workflow significantly. The product has allowed us to handle our logging requirements extensively, as we can store logs for as long as needed. Overall, Huntress Managed SIEM does an excellent job in meeting our needs and makes me give it a high recommendation score. Review collected by and hosted on G2.com.

Would be nice to have our Meraki logs ingested as well. Review collected by and hosted on G2.com.

I enjoy using Huntress Managed SIEM because of the excellent partnership experience it offers. The team is incredibly responsive, which enhances our interactions and trust in the product. Their portal is notably simpler, making navigation and usage more straightforward, which is a tremendous plus in our day-to-day operations. The products are reliable and functional, doing exactly what they are meant to do without unnecessary complications, and the pricing structure is also very competitive, ensuring good value for the cost. Additionally, I appreciate the expertise they bring to the table, as it boosts our confidence in the security solutions provided. Huntress Managed SIEM is efficient in meeting our customer's insurance requirements, which significantly aids our compliance processes. Lastly, the ease of use is continuously improving, which is highly valued in managing the system effortlessly. Review collected by and hosted on G2.com.

I find it frustrating that we cannot selectively control which types of devices are alerting us when the SIEM endpoint goes down. This leads to receiving a ton of unnecessary alerts, especially when a workstation goes offline, possibly because the user simply shut down the machine for a period of time. This lack of control creates noise in the alerting system and reduces the efficiency of our monitoring setup. Review collected by and hosted on G2.com.

The best thing is that it's a central location to check and manage log events. The alerting is also excellent and links in directly to our PSA setup to raise tickets with the support team. Review collected by and hosted on G2.com.

The only pain point of note is how the SIEM requires an active EDR agent to feed the logs. Some of our customer base are serverless and don't have a static device on site to service this. There are options around this but it means an additional device for the customer. Review collected by and hosted on G2.com.