# Huntress > Managed detection and response for MSPs, priced per endpoint from $7.99 a month direct. Huntress is a managed detection and response platform from Huntress for the MSP channel, combining an endpoint agent, identity threat detection, SIEM, security awareness training and Microsoft 365 posture management with a 24 hour, human-staffed SOC, with Managed EDR published from $7.99 per endpoint per month for direct buyers (checked September 2026). Listing updated 6 September 2026. Checked by MSP Software 5 September 2026. - Page: https://mspsoftware.net/software/huntress - Vendor: Huntress, https://mspsoftware.net/vendors/huntress, website https://www.huntress.com - Categories: MDR and SOC (primary), EDR and XDR, Security awareness and phishing simulation, Identity and access - Free trial: yes. Free version: no. - Deployment: cloud. Platforms: Windows, macOS, Linux and web. HQ: United States. Founded: 2015. - Support: 24/7 and knowledge base. Training: documentation. ## From the vendor Huntress is a managed detection and response platform from Huntress, built specifically for the MSP channel, pairing its own lightweight endpoint agent with a 24 hour, human-staffed security operations centre that investigates and explains threats in plain language rather than handing a technician a raw alert feed to interpret. Beyond its original Managed EDR product, Huntress now sells Managed ITDR for Microsoft 365 and Google Workspace identity threats, Managed SIEM for log-based detection across firewalls and other data sources, Managed SAT for security awareness training (built from its 2022 acquisition of Curricula), and Managed ISPM, a newer Microsoft 365 configuration-hardening product built from its November 2025 acquisition of the UK company Inside Agent. It suits MSPs who want a resellable security stack without hiring their own analysts, since Huntress positions itself as a partner working alongside an MSP's existing service desk rather than a replacement for it. Huntress publishes direct list pricing per product on its own site: Managed EDR from $7.99 per endpoint per month, Managed ITDR from $3.60 per licensed identity per month, Managed SIEM from $3.50 per data source per month, Managed SAT from $1.75 per learner per month, and Managed ISPM from $3.40 per licensed identity per month (checked September 2026), each on a standard 12 month term with a 50-unit minimum for direct or reseller purchases. MSPs instead get separate partner pricing that Huntress does not publish, with no minimum unit count required through that channel, so an MSP should still get a current wholesale rate rather than assume the public list price applies. A free trial covers the full, fully featured product including 24/7 SOC support. Huntress integrates with major PSAs including ConnectWise, Autotask, HaloPSA, Kaseya BMS and Syncro, and RMMs including NinjaOne, Datto RMM and ConnectWise Automate, so detections open tickets automatically in a service desk's existing queue. Its agent covers Windows, macOS and Linux, and its console is built around multi-tenant management so one technician can review every client's alerts from a single screen. Huntress is based in Columbia, Maryland, and was founded in 2015 by three former NSA cyber operators. Before buying, confirm which specific PSA and RMM integrations are set up for the platforms already in use, and get a current MSP partner rate rather than the public per-unit price, since that page is aimed at direct and reseller buyers rather than the MSP channel. ## Pricing Huntress starts at US$7.99 per endpoint per month, according to the vendor (pricing page: https://www.huntress.com/pricing). | Plan | Price | Per | Highlights | | --- | --- | --- | --- | | Managed EDR | US$7.99 | endpoint per month | 24/7 human-staffed SOC included, Agent for Windows, macOS and Linux, 50-endpoint minimum for direct/reseller purchase | ## Features | Feature | Supported | Note | | --- | --- | --- | | 24-hour human-staffed SOC | yes | | | Managed threat response and isolation | yes | SOC-verified detections trigger automated isolation and remediation actions. | | Own endpoint telemetry agent | yes | Own lightweight agent for Windows, macOS and Linux. | | Identity threat detection | yes | Sold as the separate Managed ITDR product, covering Microsoft 365 and Google Workspace. | | Network monitoring | no | No dedicated network detection product; Managed SIEM ingests firewall and other network log sources instead. | | Microsoft 365 monitoring | yes | Covered by Managed ITDR and the newer Managed ISPM configuration-hardening product. | | PSA integration for ticketing | yes | ConnectWise, Autotask, HaloPSA, Kaseya BMS and Syncro confirmed. | | Multi-tenant console | yes | | | Works with third-party EDR | yes | Managed EDR is designed to work alongside existing endpoint protection such as Microsoft Defender rather than requiring it to be replaced. | | Behavioural detection | yes | | | Automated remediation | yes | Applied after SOC analyst verification, not by the agent alone. | | Threat hunting console | yes | Human-led threat hunting by the 24/7 SOC. | | Managed MDR add-on | yes | The managed SOC is included by default rather than sold as a separate add-on. | | SIEM and SOAR integration | yes | Managed SIEM is a companion Huntress product. | | RMM integration | yes | NinjaOne, Datto RMM, ConnectWise Automate, Kaseya VSA and N-able confirmed. | | macOS support | yes | | | Linux support | yes | | | Phishing simulation campaigns | yes | | | Training content library | yes | | | Microsoft 365 and Google user sync | yes | Syncs with Microsoft 365 and Google Workspace directories. | | Multi-factor authentication | no | Huntress ITDR monitors identity risk; it does not provide its own MFA. | | Single sign-on | no | Not an SSO provider. | | Privileged access management | no | Not a PAM product. | | Passwordless and passkey support | no | | | Directory sync | yes | Microsoft 365 and Google Workspace. | | Session and risk monitoring | yes | This is the core function of Managed ITDR. | | Self-service password reset | no | | ## Integrations - ConnectWise PSA, https://mspsoftware.net/software/connectwise-psa - Autotask, https://mspsoftware.net/software/autotask - HaloPSA, https://mspsoftware.net/software/halopsa - Kaseya BMS, https://mspsoftware.net/software/kaseya-bms - Syncro, https://mspsoftware.net/software/syncro - NinjaOne, https://mspsoftware.net/software/ninjaone - Datto RMM, https://mspsoftware.net/software/datto-rmm - ConnectWise Automate, https://mspsoftware.net/software/connectwise-automate Listed products that integrate with Huntress: Bitwarden, Gorelo and SuperOps. ## Alternatives - Sophos MDR: Vendor-agnostic 24/7 MDR from Sophos, priced per user and server on a quote-only basis. https://mspsoftware.net/software/sophos-mdr. Compare: https://mspsoftware.net/compare/huntress-vs-sophos-mdr - Guardz: Unified MDR, endpoint, email and identity security for MSPs, priced per user on request. https://mspsoftware.net/software/guardz. Compare: https://mspsoftware.net/compare/guardz-vs-huntress - UnderDefense MAXI: Vendor-agnostic MDR platform from UnderDefense, starting at $11 per endpoint per month. https://mspsoftware.net/software/underdefense-maxi. Compare: https://mspsoftware.net/compare/huntress-vs-underdefense-maxi - Field Effect MDR: MDR from Field Effect for endpoints, cloud and network, priced $5 to $25 per user a month via quote. https://mspsoftware.net/software/field-effect-mdr. Compare: https://mspsoftware.net/compare/field-effect-mdr-vs-huntress ## FAQ ### How much does Huntress cost? Huntress starts at US$7.99 per endpoint per month, according to the vendor, checked September 2026. ### Does Huntress offer a free trial? Huntress offers a free trial. There is no free version. ### What does Huntress integrate with? Huntress lists integrations with ConnectWise PSA, Autotask, HaloPSA, Kaseya BMS, Syncro and NinjaOne. ### What integrates with Huntress? Bitwarden, Gorelo and SuperOps list an integration with Huntress. ### Is Huntress cloud or on-premises? Huntress is cloud-hosted; there is no on-premises version. ### Does an MSP need its own security analysts to sell Huntress? No. Huntress pairs its endpoint agent with its own 24 hour, human-staffed security operations centre, so an MSP does not need to hire or train its own analysts to offer managed detection and response. Huntress positions itself as a partner working alongside an MSP's existing service desk, investigating and explaining threats rather than leaving raw alerts for a technician to interpret. ### Does Huntress open tickets automatically in a PSA? Yes, Huntress integrates with major PSA platforms including ConnectWise, Autotask, HaloPSA, Kaseya BMS and Syncro, so detections open tickets automatically in a service desk's existing queue rather than requiring a technician to check a separate console. Confirm current integration support for the specific PSA already in use, since coverage and depth can vary between platforms. ### What does Huntress cover beyond endpoint detection and response? Huntress now sells five separate products under one platform: Managed EDR for endpoints, Managed ITDR for Microsoft 365 and Google Workspace identity threats, Managed SIEM for log-based detection, Managed SAT for security awareness training, and Managed ISPM for Microsoft 365 configuration hardening, the newest of the five and built from Huntress's November 2025 acquisition of Inside Agent. Each is priced and sold separately, so confirm which modules are actually included in a given quote rather than assuming they are bundled by default. ### How much does Huntress cost? Huntress publishes direct list pricing starting at $7.99 per endpoint per month for Managed EDR, with Managed ITDR from $3.60 per identity, Managed SIEM from $3.50 per data source, Managed SAT from $1.75 per learner and Managed ISPM from $3.40 per identity, all per month on a standard 12 month term (checked September 2026). MSPs instead get separate partner pricing that Huntress does not publish, so get a current wholesale rate before quoting a client rather than using the public per-unit price. ### Can I trial Huntress before buying? Yes, Huntress offers a free trial of the full, fully featured product, including 24/7 SOC support. There is no genuinely free ongoing tier once the trial ends, so continued use requires either a paid subscription at the published per-unit rate or a negotiated MSP partner rate.