Huntress has made a significant move in the cybersecurity landscape with the introduction of its global Incident Response (IR) Engagement Programme. This initiative aims to extend a crucial resource to participating incident response firms, offering them 60 days of complimentary Huntress protection for their clients. This offer is particularly useful both during an active incident and throughout the recovery period that follows.
The main focus of this new programme is to tackle a recurring challenge in breach recovery known as re-compromise. Once the initial breach has been identified and mitigated, attackers are often able to re-enter a system through vulnerabilities that may have been overlooked during the clean-up effort. These vulnerabilities could include anything from stolen login credentials and hijacked sessions to malicious OAuth grants or excessively privileged accounts. Essentially, even after efforts to secure a system, attackers can slip through the cracks, making ongoing vigilance essential for effective recovery.
Initially, the programme concentrates on threats such as business email compromise (BEC) and identity-based attacks. The convenience this initiative offers is substantial; incident response partners can implement Huntress solutions in the heat of a breach without needing to navigate a traditional sales cycle. This expedites their access to Huntress Managed ITDR (Identity Threat Detection and Response), a suite designed to provide continuous monitoring and response capabilities. These services focus on suspicious login attempts, compromised sessions, credential theft, and abuse of OAuth tokens.
A standout feature of this programme is the ITDR Lookback tool, which allows responders to analyze up to six months of historical identity activity. This capability proves crucial in cases of business email compromise, where identifying the point of compromise often happens well after the attack has taken shape. Realizing how and when the breach occurred is vital for making informed remediation decisions.
Furthermore, Huntress’s Managed Identity Security Posture Management (ISPM) service plays an important role in safeguarding against future incidents. It identifies misconfigurations, excessive privileges, and weak authentication protocols, enabling responders to verify that all vulnerabilities are addressed before an engagement is officially concluded. This process serves to reassure clients that their systems are secure and that all necessary steps have been taken to mitigate risks.
In addition to these robust tools, Huntress’s Security Operations Center (SOC) establishes dedicated communication channels with each participating IR firm during the duration of an engagement. This arrangement ensures that the IR firm maintains ownership of the client relationship and directs the remediation efforts. The collaborative approach taken by Huntress reflects a commitment to empower incident responders while prioritizing customer service.
Tuan Nguyen, Vice President of Channels and Alliances at Huntress, emphasized the importance of integrating recovery and protection. He noted, “Recovery and protection must go hand in hand, and when a business is under attack, every minute without protection matters.” Nguyen added that by putting the Huntress Agentic Security Platform into the hands of incident responders, businesses can contain threats rapidly, recover more robustly, and remain vigilant against future attacks. “It’s another step in our mission to protect all businesses, especially when they need us most,” he stated.
Gene Yu, the CEO of the incident response firm Blackpanda, echoed the sentiment that recovery alone is inadequate in today’s cyber threat landscape. He remarked, “Across Asia, businesses are increasingly recognizing that cyber resilience requires more than responding to an attack or covering its financial fallout.” He posited that integrating continuous protection within the recovery framework allows for a more comprehensive approach, equipping organizations to handle threats more effectively and recover with greater assurance.
After the initial 60-day period, clients will have the option to transition to continuous managed protection through Huntress’s 24/7 AI-driven SOC services. Currently, Huntress boasts a substantial client base, protecting over 6 million endpoints and safeguarding 17 million identities.
The launch of this programme marks a vital step in the ongoing effort to enhance cyber resilience in businesses worldwide. The initiative is now available for participating IR firms globally, signaling a proactive approach to combating the ever-evolving landscape of cyber threats.