We've been using Huntress for a number of years now, if it weren't for their reporting, I would be wondering what am I paying for. If your clients aren't compromised, don't expect to hear from them. In the past year, they, apparently, wanted to convey to their client-base that they are on guard, so they ran a LOW LEVEL scan of all clients. The result: Many of our clients are using the wrong tool to protect their passwords, so we sent out letters to them advising them of better options. Now, we have more users getting onto password managers instead of using their Word, Excel or notepad to store confidential details.
Recently, we experienced a phishing ordeal on one of our client's machines. We had signed up for the Huntress SIEM and were using SentinelOne for our EDR. When S1 detected the presence of an RMM utility that we did not use, it was flagged because it represented the presence of an anomaly. Since S1 was reporting to the Huntress SIEM, we were notified, both through Huntress, SentinelOne and our PSA tool, AutoTask. We called up the client and asked if they had noticed any strange or unusual behavior on their machine recently. The only reply we got was the mention of an invitation from someone unexpected. As it turned out, that person was compromised and their email sent the payload to our client that, upon clicking, launched ScreenConnect. ScreenConnect is typically used by ConnectWise RMM for remote support purposes on a totally legitimate implementation; however, this particular implementation was not condoned, but subversive. S1 and Huntress quarantined / killed the service and isolated the machine to reduce the chance of spread. While it was isolated, we were able to clean up the machine remotely and restore access soon thereafter. Needless to say the client was greatly relieved. Both SentinelOne and Huntress are winners in our eyes after this episode.
We found Huntress' support was excellent, kept us in the loop, worked with us in a timely and coordinated manner to get the client back online. Review collected by and hosted on G2.com.
Although Huntress gives us statistical feedback on its findings, it remains silent until called upon. You may wonder if it even does something till it's needed. This is a pro and a con - providing doubt, but with their reports, confirming activity. BTW, their reports are amongst the best of all my vendors. Yet when they need to act, they do it fast and they do it right. Review collected by and hosted on G2.com.