I use Huntress Managed ITDR for monitoring and detecting threats across our identities, particularly focusing on identifying potential vulnerabilities and malicious activity. I like the amount of skill gap that it fills at our company. It's a bit of a fail-safe for us. Setting it up is insanely easy, just sign in, and it's done. I think Huntress Managed ITDR does a really good job of what it's supposed to do.

It integrates with all our current PSA tools and has an open API to allow for more granular control.

The UI is intuitive and straight to the point when it needs to be.

The response time when dealing with real issues is second to none. I would much rather get a call from Huntress saying that a threat has been contained than a call from a client saying they've lost data.

Pricing is a massive win for MSPs alike. It allows a premium service to be offered at a fraction of the cost.

There is always a human reviewing alerts, not just some AI automatic reply that says the same thing to adhere to SLAs. Real people, real signals. Fully investigated before you hear anything Review collected by and hosted on G2.com.

In an MSP context, the security levels within the management portal are too broad (Admin is required to onboard a client into ITDR) Review collected by and hosted on G2.com.

It bridges the gap between Microsoft's powerful tools and our actual operational capacity across multiple tenants. It allows us to fully leverage Business Premium licenses without needing a massive internal SOC Review collected by and hosted on G2.com.

Several users say the management console is too simplistic and lacks deeper tuning/control, You don’t get the same level of granular rule-building or detection engineering you would in tools like Sentinel or CrowdStrike. Review collected by and hosted on G2.com.

Huntress Managed ITDR stands out for its excellent identity threat detection in Microsoft 365. It catches suspicious logins, account compromises, and rogue apps in near real-time with very few false positives. The 24/7 SOC backing it up provides clear, prioritized alerts and fast remediation guidance, which has already stopped potential breaches for us. Easy to deploy, lightweight, and the dashboard is straightforward and actionable — it’s a game-changer for closing the identity security gap. Review collected by and hosted on G2.com.

The main dislike is that Huntress ITDR focuses mostly on successful logins and doesn’t currently alert on failed login attempts (e.g., password sprays blocked by Conditional Access). This means we sometimes miss early warning signs. Reporting could also be more customizable and easier to export for clients. Otherwise, it’s still excellent and the pros far outweigh these points. In addition, non-interactive logins are not tracked. Review collected by and hosted on G2.com.

I like how simple their alerting system is for the different M365 issues that come through. This has been extremely easy to implement and integrate into our current security layout as well, simply giving Huntress access to the M365 environment. We use this feature as often as alerts come through, and everything has been easy enough to navigate I have never had to contact support for any assistance. Review collected by and hosted on G2.com.

We’ve had one main issue. After investigating a malicious URL that was clicked, we dug deeper into the users who received the email and found that ITDR does not detect failed login attempts - only successful ones. I wasn’t aware of this, and I later learned that password spray attacks had been occurring for a long time against nine users. That would have been extremely helpful to know earlier so we could have gotten ahead of the alerting and responded sooner. Review collected by and hosted on G2.com.

I really like the near real-time alerting of suspicious activity in Huntress Managed ITDR, which is the most valuable component for our clients as identity issues can be addressed before any damage occurs. The retroactive evaluation of inbox rules is great for cleaning up a tenant during onboarding. I also appreciate the syncing with our PSA for billing purposes, which helps ensure we're charging clients for the service. The setup process is super simple and typically takes less than 5 minutes. Additionally, the price point of Huntress Managed ITDR makes it more marketable to our general client base. Review collected by and hosted on G2.com.

We have encountered some issues with the PSA ticketing integration, however this has improved of late. It would be beneficial to see tickets consistently opened with association to the mapped PSA account, and without duplication. Review collected by and hosted on G2.com.

I like how Huntress Managed ITDR provides clear, actionable threat detection without overwhelming noise. It surfaces real identity-based threats in a way that’s easy to understand and respond to, which saves time and improves security without adding complexity. Review collected by and hosted on G2.com.

The main drawback is that some advanced customization and deeper visibility options are limited compared to more complex enterprise tools, which can make it harder to tailor detections to very specific environments. Review collected by and hosted on G2.com.

I like that Huntress Managed ITDR is very easy to implement. The reporting is really good and is very granular and detailed. It looks at all the behavior and activity with any given account or tenant and does the necessary actions before having us intervene, instead of asking us to intervene first. It's also easy to integrate in the portal, it's done by authorizing with the global admin. Pertaining to the reporting, it's really useful for account managers during their quarterly meetings with partners to show exactly what we've done on their behalf, how we help with security, and keeping them safe by showing all the incidents and how they were resolved, which basically gives them peace of mind. Review collected by and hosted on G2.com.

We had a security incident where an Office 365 account was compromised, and we did not get an alert. So that's one thing that could be improved. The alerts could be improved. Review collected by and hosted on G2.com.

I use Huntress Managed ITDR to protect my clients as a layer of protection for their email and communications, and it's more in-depth than a traditional antivirus. It detects suspicious activities, like irregular logins, and flags them to prevent account hacks. I've had several instances where it's protected my clients and their passwords. I'm extremely pleased with Huntress Managed ITDR. It's like having an IT professional in the field 24/7, monitoring my clients' computers from three different centers globally. They protect against malicious uses and have everything covered all around. The fact that it operates 24/7 over 365 days a year and monitors threats with live people gives me peace of mind. It acts as a supplement to traditional antivirus by catching threats that might get through and monitors active directories to ensure nothing crazy happens. Since using it, I've not had to clean a virus off any computer in four years. The ITDR setup was incredibly easy, just involving adding it to Azure Active Directory. Their tool literally does my job for me every single day. With Huntress, I have much less work, making things cost-effective for my clients. I'm happy with it, as it securely manages multiple clients easily and efficiently. Review collected by and hosted on G2.com.

The only downside, which isn't really that irritating, is when they lock down an account. It's because they're protecting me and my client, but it can be slightly inconvenient if the client needs to work immediately. However, once the issue is resolved, like after resetting passwords and multifactor authentication, you can release the account. Clients understand because they don't want their vital information compromised. Review collected by and hosted on G2.com.

I’ve been using Huntress ITDR almost every day for about three months now, and I’m genuinely impressed, this tool truly delivers on its promise. I’ve seen many platforms come and go in the security landscape, often overhyped or unnecessarily complex, but Huntress is different. It’s clear, intuitive, and easy to navigate, without the clutter of endless buttons and confusing options. Implementation was smooth and straightforward, making it easy to get started without hurdles.

What really makes Huntress stand out is their customer support. During incidents, the Huntress team is incredibly quick to respond, most of the time they join within minutes to collaborate and guide you through the situation. You never feel like you’re on your own. The feature set is well-balanced too: everything you need, nothing you don’t, and all of it designed to support daily operational use. I work with the platform every day, and it remains consistently reliable.

Integration with Azure works flawlessly. When an incident is detected, Huntress automatically locks the affected account, adding an extra layer of protection without needing manual action. This seamless integration makes the whole experience even stronger.

Overall, I genuinely recommend Huntress ITDR. If you’re looking for a solution that’s powerful, easy to use, simple to implement, well‑supported, and integrates smoothly into your environment, you really don’t need to look any further. Review collected by and hosted on G2.com.

The only downside I can think of is that it sometimes gets the country of an IP address wrong. This seems to happen because some IP addresses show up as multiple countries on IP lookup sites. Review collected by and hosted on G2.com.

I like that with Huntress Managed ITDR, they do the tuning and work on the back end, so I don't have to manage tons of rules and queries that need to be updated regularly. The level of noise is very low, and I rarely see an alert for something that isn't important. The initial setup was really simple, just a couple of clicks. Review collected by and hosted on G2.com.

I wish there was some customization in alerting for specific things outside of what is built-in, although, nitpicking here, I honestly don't have a tangible use case for this. So maybe it is great the way it is. Review collected by and hosted on G2.com.