WillItSurvive
Cybersecurity companies · United States

Huntress

Managed detection and response for small businesses, sold mainly through MSP partners.

Defensible for now
Assessed 21 July 2026 · Evidence as of 21 July 2026
Real protection, with named pressure against it.
On the recordSince 21 July 2026 · Checkable from Summer 2026 · Every call on the record Checkpoint: Managed ESPM/ISPM general availability and any further evidence release in the insider-threat scandal
The call

Huntress built its business on MSP trust and endpoint data Microsoft can't easily copy, but an unresolved insider-threat scandal is testing that trust right as Microsoft and Palo Alto push autonomous SOC tools into the same SMB accounts.

Huntress helps small business IT managers detect and stop cyberattacks by watching over thousands of computers from one control center, and it has built deep relationships with the IT support companies that resell it. Big competitors like Microsoft and Palo Alto Networks are harder to beat because Huntress built its strength over years through personal trust and custom integrations with IT support tools, which the giants struggle to replicate profitably in small business. However, an unresolved scandal from June 2026 claiming Huntress hid a ransomware warning to help its IPO could erode that trust foundation faster than any competitor ever could; the real test will be whether IT support companies start switching to rivals over the next six months.

Why
01
AI pressure: Microsoft Defender XDR autonomous agents and Palo Alto Cortex XSIAM/AgentiX. Microsoft ships autonomous investigation agents inside Defender, Palo Alto pushes 'autonomous SOC,' both aim at the SMB/MSP budget Huntress owns. Could AI do the core job? Only partly.
02
Bigger players: Microsoft, bundling Defender into M365. Microsoft bundles security into licenses MSPs already buy, making Huntress an added line item it has to justify every renewal. Could a giant copy it? Probably.
03
What protects it. Decade of MSP channel trust, 4M+ endpoint telemetry, and RMM workflow lock-in that generic enterprise tools don't replicate at SMB price points.
What would change this call
Ben Folland releases further evidence on the insider-threat concealment allegation. Would show whether the trust-based moat is materially damaged or the scandal fades.
Huntress files an S-1 or confirms IPO timeline in 2026. Would show whether the stated IPO north star is on track despite scandal exposure.
Named MSP partners publicly move workloads to Sophos, Arctic Wolf, or ConnectWise citing trust concerns. Would show the scandal is translating into actual customer loss, not just headline risk.
Key numbers
  • $100M+ ARR crossed (Sep 2024)
  • 4M+ endpoints, 200K organizations protected (Aug 2025)
  • ~953 employees, up from ~456 in 2024 (Jul 2026)
Named risks
  • Unresolved June 2026 insider-threat scandal alleging concealed ransomware tip-off to protect IPO narrative. Severity: high
  • IPO delay or withdrawal if scandal evidence escalates or contradicts CEO account. Severity: medium
  • Microsoft's bundled Defender XDR and autonomous agents eroding standalone MDR demand from SMBs. Severity: medium
  • Company still not confirmed profitable, continuing cash burn on hiring as of mid-2024. Severity: medium
  • Autonomous SOC marketing push from Palo Alto Networks and Sophos closing cost/quality gap. Severity: medium
Rivals, as read in July 2026
RivalDirectionEvidence
Microsoftgaining onShipped autonomous Defender/Security Copilot agents Mar-Nov 2025, bundling threatens SMB MDR demand
SophoscontestingRuns direct comparison marketing against Huntress in MSP/MDR mid-market as of 2026
Palo Alto Networksgaining onPositioned 2025 as 'Year of Autonomous SOC' via Cortex XSIAM/AgentiX, Dec 2025
Arctic WolfcontestingDirect MDR rival serving same SMB/mid-market and MSP channel segment
Questions people ask
Is Huntress profitable in 2026?
As of its June 2024 Series D announcement, Huntress said it was 'close to breakeven' but not yet profitable, and continued burning cash on hiring through its September 2024 $100M ARR milestone. No profitability confirmation has been reported since, per PitchBook coverage dated June 22, 2026.
Is Huntress going public soon?
Huntress investors have called an IPO the 'north star,' with Meritech saying in June 2024 it expected one 'in the next couple of years.' As of July 7, 2026, Huntress remains private with no confirmed S-1 filing, per Nasdaq Private Market data.
Could AI replace Huntress's SOC analysts?
Huntress deploys 'Athena,' a 40+ agent AI system (announced July 16, 2026), to automate alert triage and investigation, but frames it as augmenting, not replacing, human analysts. The company markets human-in-the-loop accountability as a differentiator against fully autonomous SOC competitors like Palo Alto Networks.
Who is Huntress's biggest competitor?
Sophos runs direct comparison marketing against Huntress in the MSP/MDR mid-market, while Microsoft's Defender XDR and autonomous Security Copilot agents (shipped March to November 2025) threaten to bundle away SMB demand. Arctic Wolf and ConnectWise also compete directly in Huntress's core segment.
Who owns Huntress?
Huntress is privately owned and venture-backed, founded in 2015 by Kyle Hanslovan, Chris Bisnett, and John Ferrell. Its June 2024 Series D of $150M was led by Kleiner Perkins and Meritech Capital, valuing the company over $1.55B, with total funding to date around $300-310M as of August 2025.
How many employees does Huntress have in 2026?
Estimates vary by source: Revelio Labs put headcount at about 812 as of December 2025, up 42.1% year over year, while Crustdata estimated about 953 employees by July 2026, up from roughly 456 in April 2024, reflecting continued active hiring.
Timeline
  • 2026-07-16Huntress introduces Athena, a 40+ agent agentic SOC investigation system
  • 2026-06-25Ex-analyst alleges Huntress insider tipped off ransomware group, CEO admits poor judgment
  • 2026-06Huntress discloses it was among hundreds of Klue customers hit in supply-chain attack
  • 2026-03-17Huntress launches Managed ESPM and ISPM posture management in early access
  • 2025-11Huntress acquires Inside Agent to build Managed ISPM product
  • 2025-08-24Huntress marks 10th anniversary, joins CISA JCDC, signs Secure by Design pledge
  • 2025-04-28Huntress launches Managed SIEM general availability at RSA Conference
  • 2024-09Huntress crosses $100M in annual recurring revenue
  • 2024-06Huntress raises $150M Series D, valuation tops $1.55B, reaches unicorn status
  • 2023-05Huntress raises $60M Series C led by Sapphire Ventures
Revision history
21 July 2026
First assessed. Defensible for now. The text above is fixed as of this date and is not edited afterwards.
In the same band
Sources