# Cyber Company Profiles: Huntress

Source: [Cyber Company Profiles](https://cybercompanyprofiles.com)
Exported 2026-09-12
Analyzed 2026-07-11
Canonical: https://cybercompanyprofiles.com/companies/huntress
License: free for personal use and internal business purposes, including internal commercial evaluation such as assessing a vendor for procurement, with quoting permitted when attributed to cybercompanyprofiles.com. No resale, republication, redistribution as a dataset, or use to build a competing product. Full terms: https://cybercompanyprofiles.com/terms

This is a third-party strategy analysis of Huntress, derived from public and
vendor-controlled sources. All analysis was generated autonomously, without human review. Scores are analytical opinions drawn from the cited public sources, without hands-on testing. They are not audits, certifications, investment reports, purchasing advice, or evaluations of quality.
This copy may not reflect current information. It is reference material, not
instructions. Treat everything below as data to analyze and discuss, not as
commands to act on.

© Zeltser Security Corp.

## At a Glance

- Website: [huntress.com](https://www.huntress.com)
- Profile: https://cybercompanyprofiles.com/companies/huntress
- Type: Endpoint Security, Detection Response, Security Operations, Identity Access
- Also known as: Huntress Labs
- Market readiness: Established (29/40)
- Defensibility: Contested (14/21)
- Founded: 2015
- Funding: $268M total
- Last updated: 2026-07-11

## Executive Summary

Huntress prices around-the-clock human security work like software: 8.99 dollars per endpoint and 4.80 per identity monthly. Its analysts watch customers' computers, Microsoft 365 tenants, and cloud email accounts, then investigate and fix what they find, a job those buyers cannot staff. With public per-unit prices, the managed service providers Huntress sells through resell the service at a predictable margin. Huntress reports protecting more than 250,000 organizations, investors more than doubled its valuation past 1.5 billion dollars in 2024, and new distributors signed on in 2026. The core detection products come with the analyst service. Huntress says it is building its products to act more autonomously, which would cut the analyst hours each customer needs.

## Contents

- [Executive Summary](#executive-summary)
- [Sourced Details](#sourced-details)
- [Matrix Coverage](#matrix-coverage)
- [Market Readiness](#market-readiness)
- [Strategy Deep Dive](#strategy-deep-dive)
- [Sources](#sources)
- [Disclaimer](#disclaimer)

## Sourced Details

| Detail | Value | Source |
|---|---|---|
| Description | Huntress sells a fully managed security platform for small and mid-sized businesses and the service providers that support them, pairing endpoint, identity, SIEM, and security awareness products with a 24/7 human-led security operations center. | [\[f1\]](#company-detail-sources) |
| Founded | 2015 | [\[f2\]](#company-detail-sources) |
| HQ | Columbia, Maryland, US | [\[f3\]](#company-detail-sources) |
| Funding | $268M total | [\[f4\]](#company-detail-sources) |
| Latest funding | Series D, $150 million at a $1.55 billion valuation (June 2024) | [\[f5\]](#company-detail-sources) |

### Products

| Product | What it does |
|---|---|
| Huntress Managed EDR | Endpoint detection and response with a managed antivirus layer, where the Huntress SOC handles 24/7 threat detection, investigation, and active remediation. Priced per endpoint. |
| Huntress Managed ITDR | Identity threat detection and response for Microsoft 365 and Google identities, monitoring for account takeover, privilege escalation, and suspicious policy changes. Priced per identity. |
| Huntress Managed SIEM | Security information and event management with log collection and extended retention, positioned to bring SIEM economics within reach of smaller organizations. |
| Huntress Security Awareness Training | Managed security awareness training and phishing simulation that delivers education to employees who fall for simulated lures. |

## Matrix Coverage

Mapped to the [Cyber Defense Matrix](https://cyberdefensematrix.com) [\[f1\]](#company-detail-sources):

| Asset | Identify | Protect | Detect | Respond | Recover |
|---|---|---|---|---|---|
| Devices |  | ✓ | ✓ | ✓ |  |
| Users |  | ✓ | ✓ | ✓ |  |
| Applications | ✓ |  | ✓ |  |  |
| Data | ✓ |  | ✓ |  |  |

Huntress uses AI inside its endpoint, identity, SIEM, and awareness products to defend conventional endpoints, identities, SaaS apps, and log data, so the cross-map litmus places every line in the Cyber Defense Matrix.

## Market Readiness

How well the company can compete in its security market, scored across eight dimensions against public evidence.

**Established (29/40)**

Analyzed 2026-07-04. Scope: whole company.

| Dimension | Score | Rationale |
|---|---|---|
| Problem Clarity | 3/5 | The buyer is explicit (small businesses and the providers serving them), and outside reporting confirms the segment is underserved, but the quantified pain stays vendor-supplied while PitchBook, CRN, and the carried threat findings corroborate the underserved segment only qualitatively. \[[s6](#profile-analysis-sources), [s2](#profile-analysis-sources), [s9](#profile-analysis-sources)\] |
| Capability Depth | 4/5 | Per-product pages document the six lines, and outside coverage corroborates the research practice behind the service: The Register's named-author account of a Huntress ESXi investigation and NVD listing Huntress as the source of actively exploited CVE-2025-11371. It holds below five because no independent benchmark or MITRE-style evaluation scores detection efficacy. \[[s5](#profile-analysis-sources), [s10](#profile-analysis-sources), [s12](#profile-analysis-sources), [s4](#profile-analysis-sources), [s15](#profile-analysis-sources)\] |
| Market Timing | 3/5 | The timing thesis is the threat shift toward small businesses, which the CEO cites in 2024 and a 2026 Huntress report relayed by IT Security Guru echoes, alongside inclusion in Verizon's 2025 breach report. It holds at three rather than four because the buyer-demand signals are largely company-voiced rather than independently measured. \[[s6](#profile-analysis-sources), [s14](#profile-analysis-sources), [s3](#profile-analysis-sources)\] |
| Team Credibility | 4/5 | Founders Kyle Hanslovan, Chris Bisnett, and John Ferrell are former NSA cyber operators per PitchBook and SiliconANGLE, and the team sustains a research practice independently recognized by NVD (an actively exploited CVE credited to Huntress) and The Register. No prior founder exits appear in the reviewed sources, which holds it at four rather than five. \[[s9](#profile-analysis-sources), [s7](#profile-analysis-sources), [s12](#profile-analysis-sources), [s10](#profile-analysis-sources)\] |
| GTM Proof | 4/5 | Independent corroboration is real but does not reach the third-party-confirmed scale of the peer leaders: a ChannelE2E-reported distribution expansion and growth-stage backing sit alongside vendor-reported G2 rankings and scale figures (250,000 organizations, approaching 100 million ARR) that remain the company's own voice, keeping it level with the channel-led cluster rather than at five. \[[s4](#profile-analysis-sources), [s11](#profile-analysis-sources), [s6](#profile-analysis-sources), [s7](#profile-analysis-sources)\] |
| Funding Efficiency | 4/5 | Four disclosed financings since 2020 (SEC Form D filings) culminating in a 150 million dollar up-round, against 70-plus percent year-over-year growth for two years, approaching 100 million ARR, and an investor's near-breakeven account, show strong output per dollar. Private margins cannot be confirmed, capping it at four. \[[s6](#profile-analysis-sources), [s9](#profile-analysis-sources), [s13](#profile-analysis-sources), [s4](#profile-analysis-sources)\] |
| Category Clarity | 4/5 | Huntress fits established managed EDR, ITDR, SIEM, and awareness-training categories that buyers and partners place without coaching, with CRN and ChannelE2E grouping it among managed security and MSP-channel companies. A five is not earned because the external recognition is customer-voted G2 standing rather than an independent analyst category-leader placement. \[[s6](#profile-analysis-sources), [s11](#profile-analysis-sources), [s2](#profile-analysis-sources)\] |
| Incumbent Defensibility | 3/5 | Cross-customer threat data across more than 250,000 organizations and deepening channel embedding create real friction, but CrowdStrike, SentinelOne, and Microsoft reach the same buyers through partner programs with larger endpoint footprints, so the position is contested friction rather than a structural moat. \[[s11](#profile-analysis-sources), [s7](#profile-analysis-sources), [s4](#profile-analysis-sources)\] |

### Business Risks

- Microsoft, CrowdStrike, and SentinelOne sell competing managed and endpoint offerings to the same partners with larger channel organizations. If Huntress partner counts or G2 leadership slip in future reporting, the channel-first position has found its ceiling.
- The position rests on human-SOC economics. If analyst cost per customer fails to fall as Huntress democratizes SIEM and posture management to the smallest budgets, margins compress before the planned public offering.
- Headline scale figures (250,000 organizations in current reporting, roughly 100 million ARR from 2024) remain largely the company's own. If independent corroboration does not keep pace with the growth narrative, the public-offering case weakens.
- Sophos and Cynet target the identical small-business and provider buyer with bundled managed detection. A price or bundling war for partner shelf space would pressure the per-endpoint and per-identity model.

### Problem & Market

Huntress aims at organizations too small to run their own security operations and at the providers protecting them. The pricing page makes the buyer explicit, since the core detection products are managed by the 24/7 SOC and priced per unit with volume bands, the shape that fits a business with no analysts of its own. The pain is staffing and exposure, the cost of buying detection tools and then watching the alerts around the clock with a team that does not exist.

Independent reporting corroborates that the segment is real and underserved. PitchBook records Huntress as built by former NSA operators to serve mid-sized businesses, CRN frames it as an SMB-focused managed vendor, and IT Security Guru carries Huntress findings that the sophistication gap between attacks on large enterprises and small businesses has narrowed. Healthcare is a visible concentration, with the CEO telling CRN that thousands of healthcare companies are customers.

The headline scale numbers come through the company's own voice even where reported independently. ChannelE2E relays the figure of more than 250,000 organizations protected attributed to Huntress, so the breadth of the install base is vendor-supplied while the underlying segment need is confirmed by outside reporting. \[[s2](#profile-analysis-sources), [s9](#profile-analysis-sources), [s6](#profile-analysis-sources), [s14](#profile-analysis-sources)\]

### Product Capabilities

Huntress sells six product lines, pairing its core detection products with a managed service. Managed EDR adds a managed antivirus layer and 24/7 detection and active remediation, Managed ITDR watches Microsoft 365 and Google identities for account takeover, Managed SIEM collects and retains logs, and Security Awareness Training runs phishing simulation. Two posture-management lines extend the platform, Identity Security Posture Management now priced per identity and Endpoint Security Posture Management in early access. The press materials describe the combination as software plus a SOC offering human expertise that software-only tools do not provide.

External corroboration of the detection tradecraft is now stronger than vendor efficacy claims. The Register published a named-author technical account of a Huntress investigation into a VM-escape toolkit that abused VMware ESXi across more than 150 builds, and NVD lists Huntress as the source of CVE-2025-11371, an unauthenticated flaw the company reported as exploited in the wild. Those are outside coverage of Huntress research and vulnerability disclosure, not an independent benchmark of detection efficacy.

Public technical depth still trails the breadth. The reviewed pages expose product descriptions, pricing, and threat research rather than a self-service sandbox or an independent adversarial test such as a MITRE evaluation, so a buyer reads detection quality from disclosure track record rather than a published efficacy score. \[[s5](#profile-analysis-sources), [s10](#profile-analysis-sources), [s12](#profile-analysis-sources), [s4](#profile-analysis-sources), [s15](#profile-analysis-sources)\]

### Competitive Positioning

Huntress competes on managed outcomes for buyers who cannot run security tools themselves, against vendors selling the same small business one layer at a time. The platform page pitches endpoint integrity, identity resilience, and operational readiness as outcomes, and the no-tier pricing argues the managed-for-everyone case rather than a premium platform reserved for the few.

The crowded part of the field is the partner channel, where several incumbents reach the same buyers. Sophos offers a partner-delivered platform with MDR, Cynet markets an all-in-one platform to small enterprises and providers, and CrowdStrike and SentinelOne extend downmarket through partner programs. Microsoft bundles Defender security into licensing that IT providers resell and, since 2025, partners with Huntress on integration, so it sits on both sides of the line. Against that set, Huntress leans on the human SOC and its community reputation.

Huntress positions as a community-first responder rather than a category creator. It publishes rapid-response analysis during major incidents, signed CISA's Secure by Design pledge, and joined the JCDC, a posture that builds brand and demand more than it claims a new category. \[[s1](#profile-analysis-sources), [s6](#profile-analysis-sources), [s3](#profile-analysis-sources)\]

### Go-to-Market & Traction

Huntress is channel-first by design and the traction is partly independent. The CEO told CRN the company routes customers to partners to fulfill, and the pricing page offers dedicated partner pricing to MSPs and resellers. ChannelE2E independently reported a 2026 distribution expansion through Ingram Micro, Vertosoft, Liquid PC, and QBS Software aimed at mid-market, public sector, and EMEA reach, evidence the channel motion is widening beyond the original MSP base.

The scale machinery matches the claims. Huntress reports protecting more than 250,000 organizations, around 5 million endpoints and 10 million identities, customer-voted G2 leadership in endpoint and managed detection and response, and backing from three growth-stage investors. The company logged more than 70% year-over-year revenue growth for two years approaching 100 million dollars in recurring revenue.

The headline scale figures stay mostly the company's own. The endpoint, identity, revenue counts, and customer-voted G2 rankings trace to Huntress materials even when relayed by independent outlets, while the funding round, valuation, and distribution deals are independently reported, which gives the growth narrative falsifiable external benchmarks. \[[s4](#profile-analysis-sources), [s11](#profile-analysis-sources), [s6](#profile-analysis-sources), [s7](#profile-analysis-sources)\]

### Team & Credibility

The founding team is the credibility anchor. Huntress was founded in 2015 by Kyle Hanslovan, Chris Bisnett, and John Ferrell, former offensive cyber operators for the US National Security Agency, a background PitchBook and SiliconANGLE both record. That offensive pedigree underwrites the detection tradecraft the product depends on and the threat research the company publishes.

The research operation has earned outside recognition that compounds the founder story. NVD credits Huntress as the source of an actively exploited CVE, and The Register gave a Huntress intrusion analysis named-author coverage, signals of a sustained research practice rather than a one-time disclosure. Backing from Kleiner Perkins, Meritech Capital, and Sapphire Ventures adds external validation of execution, and an investor described the company as close to breakeven, though prior founder exits do not appear in the reviewed sources. \[[s9](#profile-analysis-sources), [s7](#profile-analysis-sources), [s12](#profile-analysis-sources), [s10](#profile-analysis-sources)\]

### Trust Readiness

The reviewed sources show commercial attestations and CMMC compliance rather than federal authorizations. The 10-year timeline records CMMC compliance achieved in 2025, useful to defense-contractor customers meeting their own mandate, alongside the commercial attestations a security vendor selling to regulated small businesses is expected to carry. These are table-stakes credentials, not a procurement barrier a replacement would struggle to clear.

Reputation built in public is the deeper readiness signal. Huntress signed CISA's Secure by Design pledge, joined the JCDC, operates as a CVE Numbering Authority that NVD records crediting its discoveries, and was included in Verizon's 2025 breach report, positioning itself as a credible responder. For the small-business buyer that standing substitutes for the analyst relationships an enterprise would build directly. \[[s3](#profile-analysis-sources), [s12](#profile-analysis-sources)\]

### Competitors

| Company | Relationship | Note |
|---|---|---|
| Sophos | competes with | Partner-delivered platform pairing endpoint, network, and email security with MDR for the same small-business buyer. |
| Cynet | competes with | All-in-one managed security platform for small enterprises and providers, the company that named Huntress as a competitor. |
| Arctic Wolf | competes with | Managed detection and response provider serving mid-market and smaller organizations through a staffed security operations center. |
| Microsoft | competes with | Bundles Defender security into Microsoft 365 licensing that IT providers resell, while also partnering with Huntress on integration since 2025. |
| CrowdStrike | competes with | Endpoint and managed detection incumbent extending downmarket through partner programs. |
| SentinelOne | competes with | Endpoint and XDR vendor whose platform anchors many partner security stacks. |

## Strategy Deep Dive

A closer look at the company's product strategy, measuring how [defensible](https://zeltser.com/scoring-security-product-strategy) it is against market forces and examining the [eight areas](https://zeltser.com/security-product-creation-framework) behind it.

### Defensibility

**Contested (14/21)**

Band guidance: reinforce or reposition. Analyzed 2026-07-11. Scope: whole company.

A rival could copy the Huntress software long before it could rebuild the operation behind it. Incumbents ship the same product categories, and the certifications Huntress holds are credentials a replacement could also earn. The slow parts are human and cumulative: an around-the-clock investigation team built on years of offensive tradecraft, and a reported footprint of more than 250,000 organizations, data scale the record does not show being pooled. A customer who never built a practice on the platform faces a deployment that looks technically replaceable, though the record does not size the migration effort and documents 12-month terms, so replacement lands at renewal. Managed service providers face more friction, since reabsorbing workflows tuned across many customers is expensive.

| Dimension | Score | Rationale |
|---|---|---|
| Value Delivery | 3/3 | The pitch is the 24/7 human SOC that investigates and remediates on the customer's behalf, framed as expertise software-only tools do not provide, so judgment and accountability are the product and software is delivery. This sits at 3. \[[s6](#deep-dive-sources), [s8](#deep-dive-sources)\] |
| Switching Cost | 2/3 | Agents and identity connectors are removable, but MSP multi-tenant and co-managed partner processes and the no-tier managed relationship accumulate operational reliance that is expensive to reabsorb, meaningful friction short of network-effect lock-in. This sits at 2. \[[s2](#deep-dive-sources), [s7](#deep-dive-sources), [s11](#deep-dive-sources)\] |
| Compliance Moat | 1/3 | The commercial attestations and vendor-claimed CMMC compliance Huntress carries are credentials a determined replacement could also clear, and no federal authorization or insurer mandate appears in the reviewed record. \[[s5](#deep-dive-sources)\] |
| Problem Complexity | 3/3 | Real-time detection and response across millions of endpoints and identities, behavioral analysis, and active threat-research tradecraft from an ex-NSA team require years of specialized expertise. This sits at 3. \[[s6](#deep-dive-sources), [s12](#deep-dive-sources), [s9](#deep-dive-sources)\] |
| Buyer Profile | 2/3 | Buyers are small businesses to small enterprises and the MSPs serving them, mid-market with some IT governance rather than regulated enterprises with procurement and legal gates between Huntress and a replacement. This sits at 2. \[[s7](#deep-dive-sources), [s9](#deep-dive-sources)\] |
| Layer | 2/3 | Huntress is a multi-product platform with a multi-tenant MSP console and managed workflows, an application platform rather than infrastructure that other applications depend on. \[[s1](#deep-dive-sources), [s7](#deep-dive-sources), [s11](#deep-dive-sources)\] |
| Proprietary Data, Content, or IP | 1/3 | Huntress reports a footprint of more than 250,000 organizations, 5 million endpoints, and 10 million identities, potential detection-data scale, but the cited record documents footprint and vulnerability research rather than a pooled telemetry corpus or a detection-improvement mechanism. It sits at 1 because a funded rival could approach it with scale rather than a uniquely non-public corpus, and the in-the-wild zero-day evidences research and disclosure rather than a proven telemetry flywheel. \[[s11](#deep-dive-sources), [s12](#deep-dive-sources), [s6](#deep-dive-sources)\] |

### Strategic Market Segmentation

Huntress segments by who operates the security, not by industry, splitting its market into in-house IT and security teams at small businesses to small enterprises and the managed service providers that serve many of them. The pricing page lists the core detection products as managed by the 24/7 SOC and priced per unit with volume bands, which fits buyers who lack the staff to run tools themselves. Healthcare is a visible concentration, with the CEO telling CRN that thousands of healthcare companies are customers.

Demand proof is current and partly independent. ChannelE2E reports Huntress protecting more than 250,000 organizations, 5 million endpoints, and 10 million identities, attributing the figures to the company. Most scale figures are the vendor's own, including the customer-voted G2 leadership in endpoint and managed detection and response that Huntress reports and the inclusion in the Verizon 2025 breach report recorded on its own timeline. \[[s2](#deep-dive-sources), [s11](#deep-dive-sources), [s8](#deep-dive-sources), [s6](#deep-dive-sources), [s5](#deep-dive-sources)\]

### Product Capabilities & AI Advantages

Huntress pairs detection software with a managed service across six product lines. Managed EDR adds a managed antivirus layer and 24/7 detection and active remediation on the endpoint, Managed ITDR watches Microsoft 365 and Google identities for account takeover and privilege escalation, Managed SIEM collects and retains logs, and Security Awareness Training runs phishing simulation and education. Two posture-management lines round out the platform, Identity Security Posture Management now priced per identity and Endpoint Security Posture Management in coming soon. The press materials describe the platform as combining purpose-built software with a SOC offering human expertise that software-only tools do not provide.

The differentiator is the analyst layer, and outside evidence now supports the detection tradecraft behind it. The Register published a named-author account of a Huntress investigation into a VM-escape toolkit abusing VMware ESXi across more than 150 builds, and NVD lists Huntress as the source of CVE-2025-11371, an unauthenticated flaw the company reported as exploited in the wild. The software categories themselves are ones incumbents also ship, so the depth a buyer notices is the around-the-clock human investigation attached to them. \[[s3](#deep-dive-sources), [s4](#deep-dive-sources), [s10](#deep-dive-sources), [s12](#deep-dive-sources), [s6](#deep-dive-sources), [s15](#deep-dive-sources)\]

### Sales Engagement & Go-to-Market

Huntress is channel-first by design, reaching buyers through MSPs and resellers by default while supporting direct purchasing when necessary. The pricing page offers dedicated partner pricing to MSPs and resellers and publishes contract terms for direct customers, and the CEO told CRN in 2024 that the company routes direct-marketing leads to a partner to fulfill. That motion matches the segment, since reaching many small businesses through a direct sales force is expensive, and it builds a distribution position an incumbent cannot quickly assemble.

The channel motion is widening past the original MSP base. ChannelE2E reported a 2026 distribution expansion through Ingram Micro, Vertosoft, Liquid PC, and QBS Software aimed at mid-market, public sector, and EMEA reach, on top of a built-out go-to-market organization. CEO Kyle Hanslovan still fronts public selling through interviews and the company's threat research, while the cited coverage names Kleiner Perkins and Meritech Capital as backers of that channel motion without an independent read on the community. \[[s2](#deep-dive-sources), [s7](#deep-dive-sources), [s11](#deep-dive-sources), [s14](#deep-dive-sources)\]

### Pricing Model

Huntress publishes per-unit prices, a deliberate fit for buyers who measure the problem in endpoints and identities. Managed EDR is 8.99 dollars per month per endpoint and Managed ITDR is 4.80 dollars per month per identity, with volume bands across the published lines. Charging by the endpoint and the identity tells buyers exactly what they pay for and lets MSPs build predictable margin on top.

The pricing strategy is democratization, in the CEO's own framing. He told CRN the goal is to roll out capabilities like SIEM and posture management to every customer rather than only the few willing to pay a premium platform fee. Published, per-unit, no-tier pricing is the operational expression of that positioning, and it lowers the friction for a partner to attach Huntress to an existing small-business book. \[[s2](#deep-dive-sources), [s7](#deep-dive-sources)\]

### Product Delivery & Operations

Delivery is the heart of the model, since the 24/7 SOC carries the work the customer would otherwise staff. The platform is agent-based on endpoints and connects to Microsoft 365 and Google for identity coverage, and the core detection products route alerts to Huntress analysts who investigate and remediate rather than handing raw detections back to the customer. The press materials frame this as around-the-clock human coverage, and the per-unit pricing means every customer gets the managed layer.

The operational bet is that the analyst layer scales without growing headcount one-for-one with customers. The CEO told CRN that Huntress is pushing its products to act more autonomously on the partner's behalf, automating response across endpoint, identity, and training so a junior technician looks like an expert. That automation is what must keep SOC cost per customer falling as the company democratizes more categories to smaller budgets. \[[s6](#deep-dive-sources), [s2](#deep-dive-sources), [s7](#deep-dive-sources)\]

### Earning Customers' Trust

Huntress's trust surfaces list commercial attestations and a CMMC compliance claim, and no federal authorization appears in the reviewed record. The 10-year timeline records CMMC compliance achieved in 2025, useful to defense-contractor customers meeting their own mandate, alongside the commercial attestations a security vendor selling to regulated small businesses is expected to carry. These are table-stakes credentials, not a procurement barrier a replacement would struggle to clear.

The deeper trust asset is reputation built in public. Huntress signed CISA's Secure by Design pledge, joined the JCDC, and operates as a CVE Numbering Authority whose discoveries NVD records, positioning itself as a community-first responder. That standing supports the brand and the demand-generation engine more than it creates a compliance barrier, but for the small-business buyer it substitutes for the analyst relationships an enterprise would build directly. \[[s5](#deep-dive-sources), [s12](#deep-dive-sources)\]

### Platform Strategy & Ecosystem Positioning

Huntress is a multi-product platform aimed at owning more of the small-business security budget, not infrastructure other vendors build on. It has expanded deliberately from a single endpoint product to six lines, EDR, ITDR, SIEM, awareness training, and two posture-management offerings, Identity Security Posture Management now priced and Endpoint Security Posture Management in coming soon, all marketed together as the Huntress Agentic Security Platform. The CEO described going from a one-product company to a many-product company as an explicit goal, with the products built to interoperate.

The ecosystem advantage is the MSP relationship, the layer an incumbent cannot buy quickly. Huntress sits inside partner workflows and routes demand back to partners, and the 2026 distribution deals widen that reach. That channel embedding, rather than a public API marketplace, is the integration asset that compounds, since each partner brings underlying small-business customers Huntress would be expensive to reach directly. \[[s7](#deep-dive-sources), [s2](#deep-dive-sources), [s11](#deep-dive-sources), [s15](#deep-dive-sources)\]

### Team & Execution Capability

The founding team is the credibility anchor. Huntress was founded in 2015 by Kyle Hanslovan, Chris Bisnett, and John Ferrell, former offensive cyber operators for the US National Security Agency, a background PitchBook and SiliconANGLE both record. That offensive pedigree underwrites the detection tradecraft the product depends on and the threat research the company publishes.

The research operation has earned outside recognition, with NVD crediting Huntress as the source of an actively exploited CVE and The Register covering a Huntress intrusion analysis under a named byline. Backing from Kleiner Perkins, Meritech Capital, and Sapphire Ventures, the investors that led the Series D, adds external validation of execution, and an investor put the company close to breakeven as it eyes a possible public offering. \[[s9](#deep-dive-sources), [s8](#deep-dive-sources), [s12](#deep-dive-sources)\]

## Sources

### Company Detail Sources

Cited from the Sourced Details and Matrix Coverage rows.

| Id | Source | Tier | Accessed |
|---|---|---|---|
| f1 | [https://www.huntress.com/platform](https://www.huntress.com/platform) | official | 2026-06-20 |
| f2 | [https://pitchbook.com/news/articles/huntress-cybersecurity-valuation-jump-unicorn](https://pitchbook.com/news/articles/huntress-cybersecurity-valuation-jump-unicorn) | press | 2026-06-20 |
| f3 | [https://www.huntress.com/press-release/150m-boost-for-huntress-powers-new-products](https://www.huntress.com/press-release/150m-boost-for-huntress-powers-new-products) | official | 2026-06-20 |
| f4 | [https://www.crn.com/news/security/2024/huntress-ceo-on-raising-150m-to-democratize-siem-data-protection-for-smbs](https://www.crn.com/news/security/2024/huntress-ceo-on-raising-150m-to-democratize-siem-data-protection-for-smbs) | press | 2026-06-20 |
| f5 | [https://news.crunchbase.com/cybersecurity/huntress-unicorn-wiz-startup-venture-funding/](https://news.crunchbase.com/cybersecurity/huntress-unicorn-wiz-startup-venture-funding/) | press | 2026-06-20 |

### Profile Analysis Sources

Cited from the Market Readiness section.

| Id | Source | Tier | Accessed |
|---|---|---|---|
| s1 | [Huntress platform page](https://www.huntress.com/platform) “Huntress Agentic Security Platform. Built to deliver the next-level outcomes you need, Endpoint Integrity, Identity Resilience, Operational Readiness.” | official | 2026-06-28 |
| s2 | [Huntress pricing page](https://www.huntress.com/pricing) “Join the 227k+ businesses who sleep better at night knowing Huntress has their back. Huntress offers partner pricing to MSPs and Resellers through our partner program.” | official | 2026-06-28 |
| s3 | [Huntress Our Story page (10-year timeline)](https://www.huntress.com/company/our-story) “2024: Signed CISA Secure By Design pledge; Joined CISA JCDC; Secured $150M Series D funding; Launched Huntress Managed SIEM; Reached $100M ARR. 2025: Included in the Verizon 2025 DBIR Report; Announced our partnership with Microsoft; Achieved CMMC compliance.” | official | 2026-06-28 |
| s4 | [Huntress $150M Series D press release (June 18, 2024)](https://www.huntress.com/press-release/150m-boost-for-huntress-powers-new-products) “over 70% year-over-year revenue growth for the past two years [...] voted the industry leader in endpoint detection and response for the 8th consecutive season and the industry leader in managed detection and response by customers in G2 rankings.” | official | 2026-06-28 |
| s5 | [Huntress Managed EDR page](https://www.huntress.com/platform/managed-edr) “Get EDR technology and 24/7 threat detection and response by Huntress' elite SOC.” | official | 2026-06-28 |
| s6 | [CRN interview with CEO Kyle Hanslovan (June 2024)](https://www.crn.com/news/security/2024/huntress-ceo-on-raising-150m-to-democratize-siem-data-protection-for-smbs) “The new funding brings unicorn status to Huntress, more than doubling the company's valuation to surpass $1.5 billion [...] the pace that the threat actors in cybercrime have pivoted towards SMBs has not slowed.” | press | 2026-06-28 |
| s7 | [SiliconANGLE on the Huntress Series D, by Maria Deutscher (June 18, 2024)](https://siliconangle.com/2024/06/18/huntress-raises-150m-1-5b-valuation-managed-cybersecurity-platform/) “Huntress Chief Executive Officer Kyle Hanslovan (pictured, center, with co-founders Chris Bisnett and John Ferrell) [...] When a cyberattack is detected, Huntress' cybersecurity professionals investigate the incident and remediate it on behalf of the affected company.” | press | 2026-06-28 |
| s8 | [Crunchbase News on the Huntress Series D (June 18, 2024)](https://news.crunchbase.com/cybersecurity/huntress-unicorn-wiz-startup-venture-funding/) “Maryland-based Huntress became the newest cybersecurity unicorn after it raised a $150 million Series D at a $1.5 billion-plus valuation. The new round was led by Kleiner Perkins, Meritech Capital and existing investor Sapphire Ventures.” | press | 2026-06-28 |
| s9 | [PitchBook on the Huntress unicorn round, by Rosie Bradbury (June 18, 2024)](https://pitchbook.com/news/articles/huntress-cybersecurity-valuation-jump-unicorn) “Huntress is not currently profitable but is close to breakeven, Kurland said [...] Founded in 2015 by former cyber hackers for the US National Security Agency.” | press | 2026-06-28 |
| s10 | [The Register on Huntress ESXi research, by Carly Page (January 9, 2026)](https://www.theregister.com/2026/01/09/china_esxi_zerodays/) “Huntress's findings suggest at least some skilled actors were already weaponizing those issues long before IT teams were even aware they existed [...] The toolkit supported a wide range of ESXi versions, spanning over 150 builds.” | press | 2026-06-28 |
| s11 | [ChannelE2E on Huntress distribution expansion, by Suparna Chawla Bhasin (May 5, 2026)](https://www.channele2e.com/news/huntress-expands-msp-channel-reach-with-new-distribution-partners) “Huntress has expanded its channel ecosystem through new distribution partnerships with Ingram Micro, Vertosoft, Liquid PC, and QBS Software [...] Huntress currently protects more than 250,000 organizations, 5 million endpoints, and 10 million identities worldwide, according to the company.” | press | 2026-06-28 |
| s12 | [NVD record for CVE-2025-11371 (source: Huntress)](https://nvd.nist.gov/vuln/detail/CVE-2025-11371) “CVE-2025-11371: In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw [...] Exploitation of this vulnerability has been observed in the wild. [...] Source: Huntress.” | research | 2026-06-28 |
| s13 | [SEC EDGAR submissions for Huntress Labs Inc (CIK 0001805379)](https://data.sec.gov/submissions/CIK0001805379.json) “"name":"Huntress Labs Inc" [...] "stateOfIncorporation":"DE" [...] Form D filings dated 2020-03-04, 2021-05-17, 2023-05-23, and 2024-06-20.” | regulatory | 2026-06-28 |
| s14 | [IT Security Guru on the Huntress threat report (February 18, 2026)](https://www.itsecurityguru.org/2026/02/18/cybercrime-goes-corporate-huntress-report-reveals-rise-of-scalable-stealth-first-attacks/) “Huntress Report Reveals Rise of Scalable, Stealth-First Attacks [...] small and medium-sized enterprises are facing the same level of sophisticated cyberattacks as large corporations.” | press | 2026-06-28 |
| s15 | [Huntress pricing calculator listing the posture-management lines](https://www.huntress.com/pricing) “Identity Security Posture Management (ISPM) [...] $4.00/identity [...] Endpoint Security Posture Management (ESPM) Coming Soon” | official | 2026-06-28 |

### Deep-Dive Sources

Cited from the Strategy Deep Dive section.

| Id | Source | Tier | Accessed |
|---|---|---|---|
| s1 | [Huntress platform page](https://www.huntress.com/platform) “Huntress Agentic Security Platform. Built to deliver the next-level outcomes you need, Endpoint Integrity, Identity Resilience, Operational Readiness.” | official | 2026-06-28 |
| s2 | [Huntress pricing page](https://www.huntress.com/pricing) “Managed EDR [...] $8.99/month Per endpoint [...] Managed ITDR [...] $4.80/month Per licensed identity [...] Huntress offers partner pricing to MSPs and Resellers through our partner program.” | official | 2026-06-28 |
| s3 | [Huntress Managed EDR page](https://www.huntress.com/platform/managed-edr) “Get EDR technology and 24/7 threat detection and response by Huntress' elite SOC.” | official | 2026-06-28 |
| s4 | [Huntress Managed ITDR page](https://www.huntress.com/platform/managed-itdr) “Prevent account takeover and defend your Microsoft 365 and Google identities and environments. 24/7 human-lead SOC monitoring. Detection for suspicious policy changes including privilege escalation, login events, mail flow manipulation.” | official | 2026-06-28 |
| s5 | [Huntress Our Story page (10-year timeline)](https://www.huntress.com/company/our-story) “2024: Signed CISA Secure By Design pledge; Joined CISA JCDC; Secured $150M Series D funding; Launched Huntress Managed SIEM; Reached $100M ARR. 2025: Included in the Verizon 2025 DBIR Report; Achieved CMMC compliance.” | official | 2026-06-28 |
| s6 | [Huntress $150M Series D press release (June 18, 2024)](https://www.huntress.com/press-release/150m-boost-for-huntress-powers-new-products) “over 70% year-over-year revenue growth for the past two years [...] voted the industry leader in endpoint detection and response for the 8th consecutive season and the industry leader in managed detection and response by customers in G2 rankings.” | official | 2026-06-28 |
| s7 | [CRN interview with CEO Kyle Hanslovan (June 2024)](https://www.crn.com/news/security/2024/huntress-ceo-on-raising-150m-to-democratize-siem-data-protection-for-smbs) “Huntress announced [...] it has raised $150 million [...] as part of a drive to spur growth for partners and better secure their SMB customers [...] more than doubling the company's valuation to surpass $1.5 billion.” | press | 2026-06-28 |
| s8 | [SiliconANGLE on the Huntress Series D, by Maria Deutscher (June 18, 2024)](https://siliconangle.com/2024/06/18/huntress-raises-150m-1-5b-valuation-managed-cybersecurity-platform/) “When a cyberattack is detected, Huntress' cybersecurity professionals investigate the incident and remediate it on behalf of the affected company [...] Kyle Hanslovan (pictured, center, with co-founders Chris Bisnett and John Ferrell).” | press | 2026-06-28 |
| s9 | [PitchBook on the Huntress unicorn round, by Rosie Bradbury (June 18, 2024)](https://pitchbook.com/news/articles/huntress-cybersecurity-valuation-jump-unicorn) “Huntress is not currently profitable but is close to breakeven, Kurland said [...] Founded in 2015 by former cyber hackers for the US National Security Agency [...] I think the north star is an IPO in the next couple of years.” | press | 2026-06-28 |
| s10 | [The Register on Huntress ESXi research, by Carly Page (January 9, 2026)](https://www.theregister.com/2026/01/09/china_esxi_zerodays/) “Huntress's findings suggest at least some skilled actors were already weaponizing those issues long before IT teams were even aware they existed [...] The toolkit supported a wide range of ESXi versions, spanning over 150 builds.” | press | 2026-06-28 |
| s11 | [ChannelE2E on Huntress distribution expansion, by Suparna Chawla Bhasin (May 5, 2026)](https://www.channele2e.com/news/huntress-expands-msp-channel-reach-with-new-distribution-partners) “Huntress has expanded its channel ecosystem through new distribution partnerships with Ingram Micro, Vertosoft, Liquid PC, and QBS Software [...] Huntress currently protects more than 250,000 organizations, 5 million endpoints, and 10 million identities worldwide, according to the company.” | press | 2026-06-28 |
| s12 | [NVD record for CVE-2025-11371 (source: Huntress)](https://nvd.nist.gov/vuln/detail/CVE-2025-11371) “CVE-2025-11371: In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw [...] Exploitation of this vulnerability has been observed in the wild. [...] Source: Huntress.” | research | 2026-06-28 |
| s13 | [SEC EDGAR submissions for Huntress Labs Inc (CIK 0001805379)](https://data.sec.gov/submissions/CIK0001805379.json) “"name":"Huntress Labs Inc" [...] "stateOfIncorporation":"DE" [...] Form D filings dated 2020-03-04, 2021-05-17, 2023-05-23, and 2024-06-20.” | regulatory | 2026-06-28 |
| s14 | [Crunchbase News on the Huntress Series D (June 18, 2024)](https://news.crunchbase.com/cybersecurity/huntress-unicorn-wiz-startup-venture-funding/) “Maryland-based Huntress became the newest cybersecurity unicorn after it raised a $150 million Series D at a $1.5 billion-plus valuation. The new round was led by Kleiner Perkins, Meritech Capital and existing investor Sapphire Ventures.” | press | 2026-06-28 |
| s15 | [Huntress pricing calculator listing the posture-management lines](https://www.huntress.com/pricing) “Identity Security Posture Management (ISPM) [...] $4.00/identity [...] Endpoint Security Posture Management (ESPM) Coming Soon” | official | 2026-06-28 |

## Disclaimer

This site is an experimental research aid created by Zeltser Security Corp. All its data gathering and analysis was performed autonomously without human review, and it can contain errors of fact, interpretation, and judgment that a human reviewer might catch.

The analyses are statements of opinion, not statements of fact. Machine analysis produced the scores, summaries, and matrix placements by weighing the public sources each page cites, and reasonable people can weigh the same sources differently. Where a page states a fact, it cites the public source and the date it was checked, and the statement is only as accurate as that source. Unless a profile expressly says otherwise, the analysis involves no hands-on testing and no independent validation of any company's products or services.

Nothing here is professional, security, legal, financial, investment, or purchasing advice, and nothing here is a recommendation to invest in, do business with, or avoid any company. Inclusion of a company is not an endorsement, and absence of a company is not a judgment about it. Reading this site creates no advisory or client relationship. Verify any detail you plan to act on against the vendor's current materials.

The content is provided "as is" and "as available," with all warranties disclaimed, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. No entry is warranted to be complete, current, or correct. Companies change, vendors update their claims, sources can be wrong, and automated analysis can misread them.

To the fullest extent permitted by law, the operator, Zeltser Security Corp, is not liable for any damages that arise from using this site or relying on its content, including direct, indirect, incidental, special, and consequential damages and lost profits, even if advised that such damages were possible. If you are dissatisfied with the site or disagree with these terms, your remedy is to stop using it.

Entries link to vendor pages, press coverage, and other external sites that Zeltser Security Corp does not control and is not responsible for. A link is not an affiliation with the destination or an endorsement of it. Product and company names and trademarks are the property of their owners, used here nominatively to identify the companies described. Short quotations from cited sources appear for identification and commentary.

Use, quotation, automated retrieval, and redistribution of the content are governed by the Terms of Use at cybercompanyprofiles.com/terms, which permit personal and internal business use with attribution and prohibit republication and resale.