Huntress

We use Huntress to detect anything that makes it past threat protection platforms and for basic exterior scanning for open ports. The Ransomware canaries help to determine if an infection starts we can isolate the host before it spreads. We also count on Huntress for when a foothold lands and how to properly clean it off.

We leverage Huntress to protect our customers' endpoints. Huntress provides a unique view of activity on the endpoint and complements other endpoint security solutions in place. The power comes in Huntress' ability to investigate indicators and determine whether they are a threat or not. Additionally, we needed a solution that could be easily deployed, not process or memory-intensive, and is a low touch from an ongoing maintenance perspective.

Huntress is on all servers and endpoints. The product is extremely powerful at finding breaches and footprints of malicious activity that other security products do not often see. Huntress is extremely quiet so if they are alerting us, it has always been some sort of issue. Huntress is also extremely good at proactively looking back and looking across their install base to seek out where else they have seen similar footprints and when they first showed up for threats that had been ongoing and not previously disclosed.

Huntress leverages their Managed detection and response to help in identifying advanced persistent threats that basic antivirus misses. They have 24/7 threat hunting, when a threat is identified it is reviewed by a real human. An agent is installed on each windows device but it is really lightweight and has no noticeable impact on system performance.

Huntress provides a second level of protection for all our client and internal endpoints. We know that our backs are covered if our traditional AV and other solutions should fail. We also utilize learning resources from Huntress Labs to stay up to date on the latest threats. Lastly, they are constantly releasing new features that we continue to operate, such as AV management for Windows Defender, making using this built-in software viable for an MSP and providing cost savings.

In building our security practice and stack, we were looking for a security product that fits the needs of all of our users and our customers. The product needed to be safe and secure, obviously, but more to that would reduce our cost of support while improving the security in our customer base. Huntress MDR ticks almost all of our boxes and has set my mind at ease, allowing me to take that much wanted rest, especially over the holidays, when our customers are more vulnerable. Huntress helps to highlight any potential footholds, security issues, and ongoing threat detection on all our servers and workstations.

Huntress allows us to have the constant availability and visibility of a SOC without having to deploy or contract one. The mechanisms that allow for odd behavior to be elevated to the attention of a live security professional are a key safeguard against zero day attacks. We aren't large enough to deploy this in-house.