As an Admin, the integration between M365 and Huntress is a seamless integration when authorizing the credentials. This easy to onboard service is my favorite part about Huntress that makes onboarding new customers a easy onboarding service Review collected by and hosted on G2.com.

There isn't anything i specifically dislike about Huntress Review collected by and hosted on G2.com.

The intuitive detection and speed of remediation allows for fantastic proactive SOC for businesses. Review collected by and hosted on G2.com.

The data contained within detection could be more detailed. In particular when IP-based VPN detection is used as it doesn't provide the best level of detail for how and why an event was captured.

For example, if an IP previously used for a blacklisted VPN client is sold elsewhere and not updated on the database, the SOC alert will just contain information that a VPN client is in-use, regardless of whether the IP has been sold to an ISP, leading to higher investigation and mitigation time. Review collected by and hosted on G2.com.

ITDR is arguably the most impactful product Huntress offers. BEC accounts for something like 80% of all cyberattacks, and most users have no idea their email has been compromised until its being used to send more phishing emails. With Huntress ITDR in place, email compromises are detected and remediated almost as soon as they happen. Huntress even goes the extra mile to search for and remove things like inbox rules or forwarding that an attacker may have left. Its as easy to implement as authorizing an app registration. There are 0 man hours required to maintain the product, and aside from reviewing incident reports Huntress does all of the heavy lifting. If there are any questions, SOC analysts are available to chat with over the phone. Review collected by and hosted on G2.com.

Their Google Workspace offering is still in Alpha, so some of our clients can't use Huntress. We'll certainly be customers once it is on the market though. Review collected by and hosted on G2.com.

Knowing this is being monitored 24/7/365 and if something is detected having action taken to secure access with notifications of the event for review gives a near instant response to cyber incidents.

Having the ability to block or restrict allowed VPN access and to flag countries where access to 365 is not expected allowing for faster action to be taken for risky user access from locations that are not allowed. Review collected by and hosted on G2.com.

There is nothing to dislike about Huntress Managed ITDR. Review collected by and hosted on G2.com.

Huntress monitors all of our Office365 applications for malicious behavior and especially impossible travel. Huntress starts paying for itself almost immediately after being implemented. Review collected by and hosted on G2.com.

To me there are no downsides. We started implementing ITDR on a few of our clients in the last couple of months and immediately started showing clients that had just been compromised. ITDR is now an essential part of our security stack. Review collected by and hosted on G2.com.

It successfully watches suspicious logins and can isolate the end user as needed. Review collected by and hosted on G2.com.

Price is a little high since we have to pay for every user. Review collected by and hosted on G2.com.

It's successfully stopped breaches by locking accounts automatically when suspicious activity has occurred. Review collected by and hosted on G2.com.

I honestly can't think of a downside to write down here Review collected by and hosted on G2.com.

Attentive SOC and good detection rules across the board. Review collected by and hosted on G2.com.

Although very uncommon, there have been a few false positive detections marked as critical. Review collected by and hosted on G2.com.

-Product Support has far exceeded my exceptions in comparison to any other vendor we utilize. Top support

-Decent documentation that makes the onboarding process quite simple

-Easy to implement Review collected by and hosted on G2.com.

-More actionable integrations

-Tuning process of unexpected access alerts is a little overly complex

-Lack of API features Review collected by and hosted on G2.com.

As the CEO of a fast-growing digital infrastructure company, I don’t have time for theoretical tools or marketing fluff. I need solutions that deliver results, integrate cleanly, and actually reduce risk in real-world environments.

Huntress Managed ITDR stands out as one of the few platforms that understands the reality SMBs and MSPs face every day. Their approach to threat detection and response is not just reactive—it’s tactical. The managed side of the equation ensures my team isn’t buried in alerts we don’t have time to triage. Instead, we get actionable insights, clear remediation paths, and human-backed escalation that fills the critical gap between EDR noise and actual response.

What impressed me most is how lightweight yet deeply integrated Huntress is. The deployment was frictionless. The dashboard is intuitive without being dumbed down. And their threat ops team? Sharp, responsive, and clearly battle-hardened. Review collected by and hosted on G2.com.

What I dislike

While the platform performs exceptionally well, there are a few areas where refinement could elevate the experience even further. The alert customization options, for example, could benefit from more granular control—especially for teams who manage multiple client environments. Also, a slightly broader range of integrations out of the box would reduce the need for workarounds in hybrid stacks.

That said, these are minor friction points in an otherwise rock-solid solution. Review collected by and hosted on G2.com.