Huntress has launched a global Incident Response (IR) Engagement Programme. It puts the company’s AI-centric security operations centre (SOC) and managed identity security tools into the hands of incident responders while a breach is still under way.
Participating IR firms can deploy Huntress protection for their clients free for 60 days, both during an incident and after it. The program starts with business email compromise (BEC) and identity-based attacks, a category where attackers depend on stolen credentials, hijacked sessions and abuse of OAuth permissions rather than malware.
Watching identities, not just endpoints
Identity attacks are hard to clear up completely. One overlooked token or over-privileged account can be enough to let an attacker back in after the incident appears to be resolved. Huntress’s answer is continuous, round-the-clock monitoring layered into the recovery itself.
Through the program, responders get Huntress Managed ITDR for 24/7 detection of and response to suspicious logins, compromised sessions, credential theft and OAuth abuse. They also get Managed ISPM, which spots misconfigurations, excessive privileges and weak authentication policies. ITDR Lookback lets teams analyse up to six months of historical identity activity to trace earlier compromise, the kind of large-scale pattern analysis that would take human investigators a long time to do by hand.
Huntress’s SOC opens dedicated channels with each IR partner, so the company’s analysts and the responders work the incident together. The IR firm keeps the customer relationship and leads remediation.
“Recovery and protection must go hand in hand, and when a business is under attack, every minute without protection matters,” said Tuan Nguyen, VP of Channels and Alliances at Huntress. “By putting the Huntress Agentic Security Platform in the hands of incident responders to immediately contain threats and prevent further damage, we’re helping businesses fight back, recover stronger, and stay protected. It’s another step in our mission to protect all businesses, especially when they need us most.”
Gene Yu, CEO of Blackpanda, said continuous protection needs to become part of recovery itself. “Incident response and cyber insurance are two critical pieces of the puzzle, but neither can prevent an attacker from striking again. By integrating continuous protection directly into the recovery process, we can help businesses contain threats, recover with confidence, and emerge from an incident better protected against the next attack,” said Yu.
When the 60 days end, clients can move straight to ongoing managed protection from Huntress’s 24/7 AI-centric SOC. Huntress currently protects more than 6 million endpoints and 17 million identities.
The programme is available now to participating IR firms worldwide.
