MyIT + Huntress
The next evolution of the Cyber Tech Cafe MyIT Program
Who Huntress Is
Huntress is a managed security platform built specifically for organizations that don’t have a 24/7 internal security operations center. Founded by former NSA cyber operators, Huntress specializes in finding and stopping threats that bypass traditional defenses — particularly identity-based attacks, persistent malware, and ransomware operations.
They operate on a simple premise: attackers are humans, so defense should be too. Their platform combines automated detection with human-led threat investigation, meaning when an alert fires, a real analyst validates it before you ever hear about it.
Why Huntress Is the Perfect Fit for MyIT
MyIT has been CTC’s flagship managed services program for more than 15 years. Over that time it has evolved from basic patch management and monitoring into a full security operations platform — adding reporting, alerting, a SIEM, threat intelligence, and now, Huntress.
Huntress isn’t a separate product you buy from a different vendor. It’s the next layer of MyIT, managed by the same team you already work with, billed the same way, and accessible through the same support channel.
Here’s why the fit is exact:
- Same pricing model. Huntress bills per entity — devices, identities, or log sources — which is exactly how MyIT has always worked. No bundled packages that force you to pay for capabilities you don’t need.
- Same management philosophy. MyIT was built on the idea that technology alone isn’t enough. You need people who understand your environment, your users, and your business priorities. Huntress operates the same way — automated detection plus human validation. We layer their analysts with our local knowledge of your network.
- Detects what happens between the endpoints. Modern attacks don’t always start on a laptop. They steal credentials, abuse cloud identities, and move through Microsoft 365 tenants and Active Directory. Huntress ITDR detects exactly that — the identity-layer activity that happens between devices, in the cloud, and across your environment.
- Transitioning to cloud-native SIEM with human analysts. We are moving from our on-premise Graylog SIEM to Huntress’s cloud platform. This gives us not only deeper technical capabilities — better correlation, broader log coverage, and faster query performance — but also access to Huntress’s team of human analysts who validate alerts, investigate anomalies, and confirm threats before we ever call you. Technology alone generates noise. Huntress pairs the platform with people who know what they’re looking at, which means faster, more accurate response for your environment.
- Augments your existing endpoint protection. We’ve had excellent results with ESET as our prevention-focused endpoint protection. Huntress EDR adds a detection and response layer on top of that — behavioral monitoring, ransomware rollback, and 24/7 human-led threat hunting. ESET keeps the door locked; Huntress EDR spots the burglar who found another way in.
- No new portals. No new vendors. You don’t manage a Huntress relationship. You have one vendor, one invoice, one team to call. We handle the Huntress licensing, configuration, tuning, and response. You get the protection without the operational overhead.
What You Can Add
Managed EDR
Endpoint Detection & Response
Additional coverage that augments your existing endpoint protection with behavioral detection and human-led threat hunting.
- Real-time behavioral monitoring that catches what prevention-focused tools miss
- Ransomware rollback capabilities
- 24/7 incident response support
- Optional layer — deploy where you need deeper endpoint visibility
Managed ITDR (Recommended First Step)
Identity Threat Detection & Response
Additional coverage for cloud platforms like Microsoft 365 and Google Workspace. Detects compromised accounts, password sprays, impossible-travel logins, and lateral movement through identities — not endpoints.
- Monitors user accounts, service accounts, and cloud identities
- Catches attacks that never touch a managed endpoint
- Critical for any organization using Microsoft 365, Active Directory, or cloud services
- 24/7 analyst validation of identity alerts
Managed SIEM
Security Information & Event Management
Additional visibility into network-level threats. Cloud-based log aggregation and correlation that replaces on-premise hardware and gives us eyes on your entire environment.
- Centralized log collection from endpoints, servers, firewalls, and cloud services
- Correlation rules tuned to catch real threats, not noise
- Accessible and investigable from anywhere
- Eliminates SIEM hardware maintenance and upgrade cycles
Security Awareness Training
SAT
Your users are your last line of defense. Automated phishing simulations and targeted training modules that change behavior rather than just checking compliance boxes.
- Continuous phishing simulation campaigns
- Bite-sized, relevant training content
- Progress tracking and reporting
How Pricing Works
Per-entity add-ons layered on top of your existing MyIT subscription. Start with what you need, scale as your risks change.
| Add-On | What Counts as an Entity | Typical Deployment |
|---|---|---|
| Managed EDR | Each protected device | Every endpoint (augmenting existing endpoint protection) |
| Managed ITDR | Each monitored identity |
All AD + M365 + Google Workspace identities (requires 100% coverage for all licensed users) |
| Managed SIEM | Each log input/source | Critical infrastructure and compliance scope |
| Security Awareness Training | Each enrolled user | All employees with email access |
Powered by Huntress
These advanced threat protection services are powered by Huntress. We layer their technology with our hands-on management, local support, and client-specific tuning so you get enterprise-grade protection without the enterprise-grade complexity.
Who This Is For
- Organizations handling sensitive data subject to compliance requirements
- Companies with CMMC, HIPAA, GLBA or similar regulatory requirements
- Businesses that have had identity-based security incidents or business email compromise
- Teams that want 24/7 threat detection without building an internal SOC
Common Questions
Will this replace my current antivirus?
Not necessarily. Huntress EDR is designed to augment your existing endpoint protection with behavioral detection and human-led threat hunting. If and when you’re ready to change your endpoint stack, we can discuss that separately.
Do I need all four add-ons?
No. Most clients start with ITDR for cloud identity protection and add SIEM for network visibility. SAT supports compliance and culture. EDR is there when you’re ready to augment your existing endpoint protection with deeper detection capabilities.
Can I add Huntress if I’m on MyIT Essentials?
Yes. Huntress add-ons are available at all MyIT levels — Essentials, Professional, and Enterprise. Whether you want ITDR for your M365 tenant, SIEM for your firewalls, or SAT for your team, you can add exactly what you need without upgrading your base plan.
Is the SIEM really cloud-based?
Yes. No on-premise hardware required. We deploy lightweight collectors and manage all log storage, correlation, and alerting in Huntress’s secure cloud environment.
Does this change my existing MyIT agreement?
No. These are optional add-ons to your current plan. Your core MyIT services remain unchanged.
Why ITDR first?
Because the attacks we actually respond to — business email compromise, credential stuffing, lateral movement — happen at the identity layer, not the endpoint. If you only protect the laptop and ignore the login, you’re guarding the door while someone climbs through the window.
Huntress Managed Security add-ons are available to all MyIT clients at Essentials, Professional, and Enterprise levels.