Huntress Managed SIEM Reviews

My main use case for Huntress Managed SIEM is to monitor our infrastructure.

To monitor my events, one special thing compared to other SIEM tools is that it shows only important logs instead of displaying all logs. I do not need to see 1000 or 10,000 logs; I only need to see 10 logs that are very important.

This is important for my team because it will save my time and help us catch issues faster.

Huntress Managed SIEM has positively impacted my organization by reducing employee costs and reducing the time required to manage logs.

I can share that recently, I experienced a server attack which proved to be very helpful. We do not have to analyze all events; we can easily take the logs we need through the tool. Alerts will be triggered before the duration of the hack is complete.

In my opinion, the best feature Huntress Managed SIEM offers is the advanced filter AI. Instead of showing all logs, it shows only important logs, which is a very important capability.

This feature makes my day easier because we do not have to take logs one by one, and we do not have to take unnecessary logs. We only have to take the important logs, and we can easily find the root cause through those important logs instead of taking all logs. Whether you see 10,000 logs or only 100 logs, identifying the important ones will be very valuable for you.

I did not find anything for improvement; Huntress Managed SIEM is a completely perfect and stable product.

I have been using Huntress Managed SIEM for the last three months.

Huntress Managed SIEM is stable in my experience.

In my experience, Huntress Managed SIEM's scalability is very good and stable.

Training will be provided by the Huntress team, which is very easy and very collaborative. They will guide us through all aspects of the deployment. That has been a very best experience of my deployment.

I did not evaluate a different solution before Huntress Managed SIEM; I received that solution from management to use, and we started using it.

The time it took to see actionable detections after deploying Huntress Managed SIEM saved my team much time. After deployment, it saved a lot of time for my team to manage and handle logs. That has been very perfect.

On the same day of deployment, the implementation was very good. Training was provided by the Huntress team, which was very easy and very collaborative. They guided us through all aspects of the deployment.

I have seen a return on investment from using Huntress Managed SIEM because it saves a lot of time.

Before choosing Huntress Managed SIEM, we did not evaluate other options; we received approval for this tool only from management and started using Huntress Managed SIEM.

I do have something else to add about how I use Huntress Managed SIEM in my workflow; we are taking the logs from all of our systems. It will help us to manage all our infrastructure.

I am not using Huntress Managed SIEM's feature that requires no alert tuning; we are using it for taking the alerts only.

I would assess Huntress Managed SIEM's enhanced correlation and detection coverage in identifying potential threats earlier in the attack life cycle as very beneficial. Previously, I had to check all logs manually from all applications, and this tool helps us filter all logs and show only the important ones, which is very beneficial.

If you want to secure your infrastructure and save a lot of time for your organization, you can use Huntress Managed SIEM. It saves a lot of time. Instead of showing all logs, you see only the alert logs, which will be very beneficial for you. I would rate Huntress Managed SIEM a 10 out of 10.

Our main use case for Huntress Managed SIEM involves especially ITDR on the user identity side, plus the SIEM, which automates our SIEM event logs, as we manage all our endpoints through there.

I use Huntress Managed SIEM for ITDR and endpoint management through a portal-based system, where we see all our endpoints, deploy the Huntress agent from our endpoints and servers, and the SIEM collects the logs with the agent running on the endpoint to collect all the telemetry.

The portal is how we interact with Huntress Managed SIEM; we check for any alerts, jump on the portal, and that is how we mainly use it.

Huntress Managed SIEM has positively impacted our organization by improving our detection times, reducing them from about half an hour to 15 or 10 minutes, and it has saved us time by sending alerts directly to our phones without logging into the portal.

A recent incident shows how much time we save; Huntress Managed SIEM alerted us after about 5 to 10 minutes during an ITDR incident, isolating it on its own while we made sure to reset the token and password before un-isolating the device.

It is important for our organization that Huntress Managed SIEM offers security and compliance solutions without complexity, as it greatly reduces operational overhead by managing security services.

In my opinion, the best features Huntress Managed SIEM offers are its effective ITDR and SIEM together, which have really worked well for us, as it automates the SOAR capability of isolating endpoints when it detects suspicious activity.

The endpoint isolation and alerting process through Huntress Managed SIEM works by isolating the whole endpoint if it finds suspicious activity and provides us with detailed steps to follow afterwards, such as resetting a malicious user token's password if detected.

We also use Huntress SAT Managed User Training, which is really useful for educating users on phishing, including malicious emails; we have a managed phishing portal that provides training each month to all users imported on the portal, and they produce a report for us each month.

I consider Huntress Managed SIEM's AI capabilities to be a good feature for governance and security, as compared to before, where we had to search manually for specific endpoint logs, the AI adds useful functionality.

The visibility provided by Huntress Managed SIEM on the same day of deployment is achieved by deploying an agent on EDR, which then gets the telemetry.

To improve Huntress Managed SIEM, a company that wants to add more detection would need to request it from support, and I think adding custom detection features would bring real value to this product.

I do not feel any need for improvements on the user interface, as it is easy to navigate and manage.

I chose nine out of ten because a perfect ten would involve the ability for Huntress Managed SIEM to allow us to create custom detection rules; since that feature is not available, I rate it a nine.

We have been using Huntress Managed SIEM for quite a long time, probably about a year and a half, along with Huntress ITDR and SIEM.

I would rate Huntress Managed SIEM a nine out of ten.

Huntress Managed SIEM's AI does not make a difference in our daily operations regarding the accuracy and reliability of output.

Huntress Managed SIEM is deployed in our organization as a private cloud-based portal.

We use Azure and also AWS for specific use cases.

We did not purchase Huntress Managed SIEM through Huntress Marketplace; it was purely through Huntress.

We do not use the Huntress Managed centimeters, so I cannot speak to the time it took to see actionable detections after deployment.

We do not use the feature of Huntress Managed SIEM that requires no alert tuning.

Huntress is our primary MDR solution, though we have had some clients on Arctic Wolf and Perch Security. We deploy it across all different verticals, including hospitals and healthcare, small businesses, law offices, and municipalities, as part of our full stack.

We use the complete Huntress stack, which includes the MDR, ITDR, and the SIEM. We were one of their early testers for the SIEM.

Huntress's response time is far superior to that of any other vendor we have tested for MDR.

It removes the fear of threats, knowing that Huntress Managed SIEM is monitoring the environment and will catch items and alert us appropriately, without noise.

I would appreciate more features in the stack. I would like Huntress MDR and SIEM to integrate with EDRs like SentinelOne to combine that level of intelligence and information into their stack so that they can leverage whatever protections the client has and gather that intelligence to help with the MDR side.

Regarding the SIEM, I would like to see more features added. I would appreciate the capability of setting our own alerting based on certain triggers within the logs so that we can compete and fill a void that their SIEM has compared to other SIEMs in the industry such as Perch Security for ConnectWise.

I have been using this solution for approximately ten years, since Huntress was a small startup.

We do not have to reach out to support very often. When we do, sometimes the cases take a bit more time. I would rate their support at an eight. There is always room for improvement. Usually when we reach out, it is for a bigger issue that may require development expertise. I find that some of that takes time with any vendor, and that can add delays in communication because you are communicating to tier one and tier two people who are then communicating on the back end, so you are not getting updates as frequently.

Huntress is priced competitively in the industry. We appreciate their model in terms of MSP focus with tiered pricing. We understand what the pricing will be based on how many agents we have, which makes planning easy when selling a product and baking it into ongoing costs as part of a stack.

ConnectWise has a fully featured SIEM solution in terms of alert and log generation, and alerting based on that, whereas Huntress Managed SIEM is working to remove much of the burden, which is beneficial for us. However, there are certain alerts that I would like to have automatically create a ticket or generate an email based on being generated or found in the logs. This review receives an overall rating of eight out of ten.

My main use case for Huntress Managed SIEM is setting up security logging for our firewalls. My primary purpose is to set them up for compliance reasons, and in addition to that, it is good to use when analyzing situations in which an endpoint device may have been compromised, having that additional data there to get information for further review.

Huntress Managed SIEM has positively impacted my organization primarily by helping us help our customers achieve the compliance levels at which they are trying to achieve, and it also gives us additional information when we are reacting to security events that are presented from Huntress's SOC.

A specific example of how having that extra information from Huntress Managed SIEM has helped me respond to a security event or achieve compliance is that it has become a mandatory requirement for our customers with CMMC to have data log retention, and Huntress Managed SIEM allows that functionality.

The best features Huntress Managed SIEM offers include the wide variety of ways in which the SIEM can gather source materials, how long the data can be stored for, the volume of storage, and the ease of use of the queries using the AI search function.

The AI search function has simplified the ability to search for syslog events; prior to the AI feature, I would have had to use Google to build the ESQL queries needed to gather the information, whereas it is now nice to be able to have it inside of the platform.

I have not run into a situation where there has been a problem, and even when I have reached out to customer technical support, they have been able to immediately address any problems that I have encountered.

Huntress Managed SIEM's scalability is fine and works great, as we have many customers already in the platform.

The customer support is excellent.

The advice I would give to others looking into using Huntress Managed SIEM is to review all relevant data and help guides before deployment. I would rate this product a 9.

My main use case for Huntress Managed SIEM is SIEM. I use Huntress Managed SIEM in my organization to monitor firewalls for all my customers. Day-to-day, that process mostly involves looking for alerts. My setup and workflow are straightforward without anything unique to add.

The best features Huntress Managed SIEM offers are real people looking at the alerts. Having real people reviewing the alerts compared to automated systems gives me confidence and peace of mind. Huntress Managed SIEM has positively impacted my organization because we did not have anything before and now we do. The difference that has been made is evident in that the alerts actually get picked up on.

Huntress Managed SIEM can be improved by adding the ability to have multiple endpoints delivering SIEM log collectors to a single cloud agent. There are no other improvements needed for Huntress Managed SIEM beyond what I have mentioned.

I have been using Huntress Managed SIEM for six months.

I would rate Huntress Managed SIEM a 10 out of 10. I give it a 10 because it is good.

Regarding Huntress Managed SIEM's AI capabilities, I have not used them, so I am not sure about their effectiveness. I also have not used Huntress Managed SIEM's AI features to assess their accuracy and reliability of output.

My advice to others looking into using Huntress Managed SIEM is to do it.

We use it for log collection on customers that have compliance requirements.

The single pane of glass management with the other security products we use from Huntress is incredibly valuable. It allows us to manage multiple Huntress products in a central place, and we don't have ten different portals; we have one.

There should be better exclusions of log types and the ability to exclude specific types of logs that might be using a lot of data.

I actually just started using it. It's a fairly new product in our company, and I'd say it's been about a month.

It's been stable.

It's a cloud SaaS product, so I would assume it's scalable. I've never run into an issue with it.

We switched from Total DYL. Price was part of the reason, however, moving everything under that single product was incredibly valuable.

The initial deployment was easy. I'm not sure if it uses the same agent as the EDR or if it's a separate agent, however, our security person who deployed it said it was super easy to deploy.

It was just us, no third party was involved. The deployment was a one-person job.

I think the pricing for SIEM is good.

I advise you to utilize Huntress as a resource. Huntress is a great company and incredibly helpful with deployment. Some software vendors are not helpful, leaving you out on an island. Huntress is incredibly helpful. 

On a scale from one to ten, I would rate SIEM an eight.