Huntress sells a managed security platform on subscription. Each product combines installed software or a cloud integration with a 24/7 security operations centre (SOC) service that is included in the product price rather than sold as an add-on.[1] The products on the pricing page are Managed Endpoint Detection and Response (EDR), Managed Identity Threat Detection and Response (ITDR), Managed Security Information and Event Management (SIEM), Managed Security Awareness Training (SAT) and Managed Identity Security Posture Management (ISPM).[1] Licensing is by count of deployed units, and the unit differs by product. The contract is a Terms of Service plus an Order, and most customers buy through a managed service provider (MSP) or a reseller.[1][2]
Units and list prices
The pricing page states that pricing “is based on your number of endpoints, identities, learners, and data sources”, and that there are no tiers, add-ons or bundles, with the 24/7 SOC included at no additional cost.[1] (The Managed SIEM support documentation does describe an Extended Retention add-on and subscription tiers, so that statement should be read as a description of the platform bundles rather than of every option.[5]) Prices are shown in US dollars at 100 units, and the per-unit rate falls as volume rises.[1]
| Product | Unit | MSRP per unit per month | Example at 100 units |
|---|---|---|---|
| Managed EDR | Endpoint | USD 8.99 | USD 7.99 |
| Managed ITDR | Licensed identity | USD 4.80 | USD 3.60 |
| Managed SIEM | Data source | USD 4.00 | USD 3.50 |
| Managed SAT | Learner | USD 2.08 | USD 1.75 |
| Managed ISPM | Licensed identity | USD 4.00 | USD 3.40 |
Source for the table: the Huntress pricing page.[1] The page notes that the price includes the SOC but not deployment, integration or the day-to-day portal management that Huntress partners can provide.[1] The page is undated, so the figures should be treated as a snapshot taken on 2026-10-08.
Contract structure
The subscription Terms of Service, effective and last updated 2025-10-31, govern the customer’s subscription and licence, including paid and free trial use.[2] The fees, term, Licensed Units and other details of a subscription are set in Huntress’s online portal or in a written order form, together called the Order, and if the customer has a separate written agreement or order form with Huntress, that agreement controls where it conflicts with the Terms.[2] The huntress.com Website Terms of Use (version 1.3, last updated 2026-01-06) apply only to the website, and say that the terms for the subscription services are at huntress.io.[3]
The Terms define Licensed Units as “the number or volume of licenses, users, data volume, data sources, identities, or other units as referenced on the Order for the Services”.[2] The customer is charged for the minimum Licensed Units chosen at checkout or in the Order and for each additional Licensed Unit over the minimum at the per-unit Fee.[2] The Terms grant a non-transferable right to use the Services and, for software, to install and execute the object code up to the Licensed Units, for internal business purposes or, if applicable, with the customer’s Customer Clients.[2]
Terms, renewals and minimums
The pricing page states that the standard term is 12 months for MSPs, direct customers and resellers.[1] Under the Terms, a subscription automatically renews for the same duration at current pricing unless the customer opts out at least 30 days before the end of the term, and a customer that terminates early remains responsible for the charges for the full term without refund of prepaid amounts.[2] On minimums, the pricing page says that through an MSP there are no Huntress-required minimum seat counts, whereas purchases through a reseller, and direct purchases, carry a Huntress-required minimum of 50 seats per product.[1] Multi-year terms for price protection are not offered as standard.[1]
Overage handling is stated plainly: usage above the committed minimum “is not currently auto-billed and is handled manually” for MSPs, with similar wording for direct customers and resellers.[1] A licence manager should expect that overage can be raised retroactively on the basis of the usage that Huntress’s monitoring systems track, since the Terms state that those systems “will be used to track purchases and usage of the Services”.[2] No separate audit clause was identified in the Terms of Service text read for this article.
How units are counted
- Endpoints (EDR). Billable sources are active agents in organisations where EDR is enabled.[8] For service providers, only the agent count on the last day of the billing cycle is billed, with no proration.[6]
- Identities (ITDR). Unique human-controlled identities with a standard human-facing licence are billable; unlicensed shared mailboxes, room or resource mailboxes and unlicensed admin accounts are not.[4]
- Data sources (SIEM). Each source is allocated and billed 10 GB per month of ingestion, and sources that sent data in the last 30 days are billable.[5]
- Learners (SAT) and ISPM identities. The documents read name the unit but do not define counting in further detail.[1]
The following articles cover these in detail: Huntress Managed EDR, ITDR and ISPM licensing and Huntress Managed SIEM and Security Awareness Training licensing.
Channel and trials
Huntress describes itself as channel-first and states that most teams buy through a partner.[1] MSP pricing with aggregate discounting is reserved for providers that meet stated criteria, including at least 40 percent of revenue from ITSec-related services and support.[7] Free trials are described as the same fully featured version as paid products including SOC support.[1] See Huntress partner channel and contract terms.
What a licence manager should check
- Which party holds the contract (Huntress, an MSP or a reseller) and whether an Order or separate agreement overrides the Terms of Service.[2]
- The minimum Licensed Units per product and the 12-month term dates, including the 30-day non-renewal notice.[1][2]
- Deployed counts: active agents, billable identities and billable data sources, against the Order.[4][8]
- Whether any organisation has a purchased product enabled by default that it does not use, because purchased products default to enabled for all organisations.[8]
Out of scope
This article does not cover partner-negotiated discounts, the Data Processing Addendum or the Security Addendum, which are separate documents, and does not describe Huntress products’ technical features. A Huntress Buyout Program for customers in other contracts is mentioned on the pricing page, but its terms are not published there.[1]