Latest Updates

How secure is your Microsoft 365 environment - and what should you fix first? Our new Identity Posture Assessment gives you a clear picture of where you stand and a prioritized path to stronger defenses. This on-demand report evaluates your tenant against the Huntress Identity Security Framework, highlighting security gaps, misconfigurations, and opportunities to improve. It only scores controls you’re licensed for, so you’re never penalized for features you don’t own. What’s inside: Your current rating and potential improvement: See where your posture stands and how much it could improve with recommended controls. Prioritized next steps: Review gaps ranked by severity, with clear guidance on what Huntress can deploy and what requires manual action. A shareable, co-branded report: Add your branding to support prospect conversations, client onboarding, QBRs, and leadership updates. Available on demand in the Huntress portal and via API. From the ISPM dashboard, select an organization in the Quick Assessment card and click Generate to download your PDF. You can also retrieve the report through the Huntress API to incorporate assessments into your existing workflows. Whether you’re helping clients harden their tenants or securing your own organization, start with a clear baseline and generate fresh assessments to show your progress. Learn more about the Posture Assessment in our new blog .

Your Microsoft 365 tenant has a history. Lookback helps you see what happened before Huntress arrived - and who might still be inside. Now generally available, Lookback automatically runs Huntress Unwanted Access detections across up to 180 days of available Microsoft 365 login history when an eligible tenant onboards to Managed ITDR. It helps you uncover earlier compromises, understand what you’ve inherited, and address active threats without waiting for an attacker’s next move. What this means for you: Active compromises get a response: The Huntress SOC investigates, issues a critical Incident Report, and revokes active sessions. Previously remediated activity stays in context: Already-resolved compromises appear as historical findings, without triggering a new incident or unnecessary lockdown. Findings are easy to access and share: Lookback appears as a dedicated section of your Identity Security Assessment, delivered by email and available in the Huntress portal within 48 hours of onboarding. Availability: Lookback runs once, automatically, for eligible Microsoft 365 tenants newly onboarded on or after October 19, 2026, including trial tenants. There’s nothing extra to configure. Lookback is not available for GCC, GCC High, or CPV tenants. Whether you’re onboarding a new client or bringing your own organization onto Managed ITDR, Lookback gives you historical context and SOC-backed action from day one. Read more in our new blog and check out our KB article.

Partners can now list their SIEM log sources through the API, using the same data shown on the Source Management page: name, type, organization, agent, status, last activity, and 30-day data volume. This makes it easy to check coverage and catch a source that's gone silent, right from your own tools, without needing to open the portal. See the API docs to learn more.