Cybersecurity leader Huntress has introduced a comprehensive suite of advancements across the Huntress Agentic Security Platform, translating telemetry from frontline attacks into proactive security layers for businesses and channel partners.
Covering identity threat detection, endpoint defense, security information and event management (SIEM), and behavioral awareness training, the expanded platform enables organizations to close exploitable attack surfaces and sever adversary pathways at machine speed.
Tapping Into Ecosystem-Wide Scalability for Delivering “Herd Immunity” to Fleets
Modern cyber-attacks are enabled by toolkits that automate processes across cloud infrastructure and endpoints within minutes. In order to combat against such fast-paced attacks such as identity theft, session hijacking, and ransomware attacks from remote locations, it becomes important for any defense system to provide automated response solutions.
This is where Huntress can leverage the intelligence gained from its operating footprint that consists of over 300,000 companies, 17 million identities, and 6 million secured endpoints. If there is any sign of malicious activity occurring on one system, it translates them into protection policies for all the fleets. With this comprehensive information coupled with continuous human verification of the same from its 24/7 AI-centric Security Operations Center (SOC), Huntress can neutralize the threat.
Also Read: CrowdStrike to Acquire Automated AI Security Testing Pioneer Dreadnode to Secure Agentic Systems Before Deployment
Key technical enhancements and product updates across the platform include:
Adversary Infrastructure Blocking (Managed ITDR): Converts confirmed attacker hosting, relay, or proxy nodes into proactive defense mechanisms. When an identity exploit is confirmed, the platform systematically generates and applies blocking Conditional Access policies across all participating Microsoft 365 environments on the same business day, blocking threat actors at sign-in.
Malicious Service Principal Neutralization (Managed ITDR): After researching the compromise of vendors in supply chain, this functionality will watch out for service principal authentications, notify administrators of incidents in structured form, and block all compromised non-human identities. The module is available for organizations that have license of Microsoft Entra ID P1 level or above and will provide more insight on permissions of enterprise applications without manual partner intervention.
Lookback Tenant Audits (Managed ITDR): Searches for 180 days of pre-onboarding authentication logs of newly created Microsoft 365 tenants. The engine reveals concealed IoCs of token theft, adversary-in-the-middle (AiTM), compromised browsers, and compromised data center logins, stopping any active sessions right away on the first day.
Brute Force Sentry (Managed SIEM): Detects ongoing brute-force attacks against Windows RDP, RD Gateway, RDWeb, and Linux SSH connections. Through cross-correlating failed authentication attempts and successful authentication events, the engine will allow visibility into the exposed infrastructure and targeted accounts.
In-the-Flow Defense Drills (Managed SAT): Connects endpoint detections directly with real-time end-user training. When Managed EDR neutralizes an execution attempt such as a ClickFix exploit the system triggers an immediate contextual notification guiding the employee through a brief training module on that specific tactic, transforming an active intervention into a preventative habit.
Remote Ransomware Disruption (Managed EDR): Counters unauthorized lateral ransomware attacks that launch from unmanaged, compromised devices on the same internal network. Using Huntress Ransomware Canaries, Managed EDR detects early malicious encryption behavior and immediately terminates network communications between the unmanaged threat vector and protected devices.
Identity Posture Assessment (Managed ISPM): Delivers on-demand posture evaluations for Microsoft 365 tenants benchmarked against the Huntress Identity Security Framework, pairing gap analysis with automated configuration rollouts.
Unfiltered Industry Statements and Executive Commentary
“Defending against threats moving at machine speed requires knowing the adversary better than anyone else and anticipating their next move by continuously learning from every attack and leveraging our scale and elite security researchers to turn that intelligence into stronger protection,” said Prakash Ramamurthy, Chief Product Officer at Huntress. “These innovations demonstrate how we’re bringing together unrivaled human expertise, AI, and real-world threat intelligence to protect businesses at the speed adversaries operate.”
“At Courser, our goal is to give all businesses access to the same level of cybersecurity protection and expertise that larger enterprises rely on, without the cost or complexity,” said Steven Drew, Chief Technology Officer at Courser. “Huntress is an important part of that strategy, bringing advanced threat detection, expert threat research, and a 24/7 security operations center to our broader security offering. Their continued innovation helps us strengthen protection across our network of managed service providers and deliver better security outcomes for the businesses we serve.”
“The fact that Managed SAT from Huntress is built on real tradecraft that their SOC is seeing in the wild has helped us demonstrate to school administrators and users how an entire district could be compromised in just a few minutes,” said Michael Codis, Systems & Network Administrator, Hunterdon County Educational Services Commission. “Showing how that risk comes to life is incredibly powerful. It helps administration of the districts we support understand just how quickly an attack can unfold and equips our users with the knowledge and skills to stay vigilant and protect themselves and our school systems against whatever kind of threat they may face.”