What you are actually buying

You are not just buying another Microsoft 365 security tool.

You are buying 24/7 identity threat detection and response, backed by real analysts who investigate suspicious account activity for you.

• 24/7 human-led monitoring for Microsoft 365 identity threats
• Detection of suspicious logins and compromised accounts
• Investigation of risky inbox rules, forwarding and manipulation
• Visibility of malicious or rogue OAuth applications
• Clear response actions when something needs attention

This is the gap between “we have Microsoft 365 security settings” and “someone is watching for identity attacks.”

What Huntress ITDR helps detect

• Business email compromise
• Credential theft and account takeover
• Suspicious sign-ins and impossible travel
• Session hijacking and MFA bypass attempts
• Malicious inbox rules and forwarding
• Rogue or risky OAuth applications
• Account activity that Microsoft 365 alone may not make obvious

Who this is for

If your organisation relies on Microsoft 365, your identities are now one of your biggest attack surfaces.

How this fits alongside Huntress EDR

Huntress EDR and Huntress ITDR protect different parts of your organisation.

• Huntress Managed EDR protects devices from endpoint threats
• Huntress Managed ITDR protects Microsoft 365 identities and accounts
• EDR helps when attackers target devices
• ITDR helps when attackers target logins, inboxes and cloud accounts

Many modern attacks start with identity, not malware. That is why ITDR is often the missing layer in Microsoft 365 environments.

Why organisations choose Huntress ITDR

• 24/7 expert monitoring and human-led investigation
• Detects identity threats Microsoft 365 alone can miss
• No premium Microsoft licensing required
• Built for schools and small businesses, not just large enterprises
• Useful evidence for cyber insurance, Cyber Essentials and client security questions

Traditional identity security tools can feel built for large enterprises with large security teams. Huntress ITDR gives smaller organisations a more practical route to monitored identity protection.

Need more than 10 users?

If you are protecting more than 10 users, it is worth speaking to us first.

Pricing can become more cost-effective at scale, and schools or academies may qualify for education pricing.

We will give you a clear price based on your Microsoft 365 setup, so you are not overpaying or guessing.

Learn more about Huntress Managed ITDR

What happens after you subscribe?

1. We confirm how many Microsoft 365 users you want to protect
2. Huntress ITDR is connected to your Microsoft 365 environment
3. Identity monitoring starts across your protected users
4. If suspicious activity is detected, it is reviewed and actioned

No long project. No unnecessary Microsoft licensing upgrade. No new alert queue for you to manage alone.

Common questions

Is Huntress ITDR the same as Huntress EDR?
No. EDR protects devices. ITDR protects identities and Microsoft 365 accounts. Many organisations benefit from both.

Do I need premium Microsoft 365 licensing?
No. Huntress ITDR is designed to work alongside your existing Microsoft 365 setup without requiring costly licence upgrades.

Does this stop business email compromise?
It helps detect and respond to the signs of business email compromise, including suspicious account activity, inbox manipulation and malicious forwarding rules.

Is this suitable for schools?
Yes. Huntress ITDR is a strong fit for schools and academies using Microsoft 365 who need better visibility over identity and email account threats.

Does this help with cyber insurance?
Yes. It can support your wider cyber insurance position by showing that Microsoft 365 identities and accounts are being monitored for suspicious activity.

Can I cancel after one month?
No. This is a 12-month minimum subscription. If you are unsure, speak to us before ordering.