Huntress has launched a global Incident Response (IR) Engagement Programme that gives participating IR firms 60 days of free Huntress protection for their clients, both during an active incident and in the weeks of recovery afterward.
The programme goes after a familiar problem in breach recovery: re-compromise. Once the initial intrusion has been contained, attackers often come back in through whatever the clean-up missed, whether that is stolen credentials, a hijacked session, a malicious OAuth grant or an over-privileged account.
To begin with, the program focuses on business email compromise (BEC) and identity-based attacks. IR partners can deploy Huntress in the middle of a breach without going through a traditional sales cycle. That gives them access to Huntress Managed ITDR, which provides 24/7 monitoring and response for suspicious logins, compromised sessions, credential theft and OAuth abuse.
Looking back and checking the fix
A feature called ITDR Lookback lets responders review up to six months of historical identity activity. That matters in BEC cases, where investigators often find the compromise point long after the attack began.
Alongside this, Huntress Managed ISPM (identity security posture management) flags misconfigurations, excessive privileges and weak authentication policies. Responders can use it to confirm that remediation has actually held before they close an engagement.
Huntress’s SOC also sets up dedicated communication channels with each IR partner during an engagement. The IR firm keeps ownership of the customer relationship and leads the remediation work.
“Recovery and protection must go hand in hand, and when a business is under attack, every minute without protection matters,” said Tuan Nguyen, VP of Channels and Alliances at Huntress. “By putting the Huntress Agentic Security Platform in the hands of incident responders to immediately contain threats and prevent further damage, we’re helping businesses fight back, recover stronger, and stay protected. It’s another step in our mission to protect all businesses, especially when they need us most.”
Gene Yu, CEO of incident response firm Blackpanda, argued that recovery on its own is not enough.
“Across Asia, businesses are increasingly recognizing that cyber resilience requires more than responding to an attack or covering its financial fallout,” said Gene Yu, CEO of Blackpanda. “Incident response and cyber insurance are two critical pieces of the puzzle, but neither can prevent an attacker from striking again. By integrating continuous protection directly into the recovery process, we can help businesses contain threats, recover with confidence, and emerge from an incident better protected against the next attack.”
When the 60 days are up, clients can choose to move on to continuous managed protection from Huntress’s 24/7 AI-centric SOC. Huntress currently protects more than 6 million endpoints and 17 million identities.
The programme is available now to participating IR firms worldwide.
