Huntress Launches IR Partner Program With 60-Day Protection

Huntress launches an incident response program giving partners 60 days of free security protection to accelerate recovery and prevent repeat cyberattacks.

Written By
Jordan Smith
Jordan Smith
Nov 10, 2026
3 minute read
Channel Insider content and product recommendations are editorially independent. We may make money when you click on links to our partners. Learn More

Huntress has launched a global incident response partner program offering 60 days of no-cost security protection to businesses during and after cyberattacks, giving participating incident response firms immediate access to managed security capabilities.

The new Incident Response (IR) Engagement Program allows partners to deploy Huntress’ security platform without a traditional procurement process while retaining control of customer relationships and leading remediation efforts.

Huntress targets identity threats during incident recovery

The program initially focuses on business email compromise (BEC) and identity-based attacks, with security tools designed to help incident responders identify lingering threats and address vulnerabilities during recovery.

Through Huntress Managed Identity Threat Detection and Response (ITDR), participating firms can monitor suspicious logins, compromised sessions, credential theft, and OAuth abuse.

Its Identity Security Posture Management (ISPM) capabilities help identify excessive privileges, authentication weaknesses, and misconfigurations that could leave organizations vulnerable to additional attacks.

Partners can also use Huntress’ ITDR Lookback capability to investigate up to six months of historical identity activity, potentially uncovering threats that preceded the incident under investigation.

Program connects incident response with ongoing security

Beyond identifying and containing threats, the program is designed to help incident response firms address the period between active remediation and the establishment of longer-term security protections.

Huntress’ 24/7 security operations center (SOC) provides continuous monitoring and response capabilities during that transition. The company also maintains dedicated Slack channels with participating IR partners to coordinate activities throughout active incidents.

For incident response firms, the approach could help reduce the operational complexity of securing a compromised environment during remediation. It also gives partners a way to introduce managed security capabilities without requiring customers to complete a traditional purchasing process during an active incident.

Advertisement

“Recovery and protection must go hand in hand, and when a business is under attack, every minute without protection matters,” said Tuan Nguyen, VP of Channels and Alliances at Huntress.

“By putting the Huntress Agentic Security Platform in the hands of incident responders to immediately contain threats and prevent further damage, we’re helping businesses fight back, recover stronger, and stay protected. It’s another step in our mission to protect all businesses, especially when they need us most,” Nguyen added.

IR partners retain customer relationships during recovery

Under the program, participating incident response firms remain responsible for leading remediation efforts and retain ownership of their customer relationships, while Huntress supplies managed security capabilities.

That distinction is important for partners whose value depends on maintaining a direct advisory relationship with customers during and after a security incident. The arrangement could also create opportunities to discuss longer-term managed security requirements once the immediate recovery work is complete, although Huntress has not detailed what happens commercially after the initial 60-day protection period.

The announcement follows Huntress’ cyber insurance partnership with Acrisure, which provides eligible U.S. customers and partners access to no-deductible coverage. Together, the initiatives reflect Huntress’ efforts to expand its role in cyber resilience beyond ongoing threat detection.

“Across Asia, businesses are increasingly recognizing that cyber resilience requires more than responding to an attack or covering its financial fallout,” said Gene Yu, CEO of Blackpanda. “Incident response and cyber insurance are two critical pieces of the puzzle, but neither can prevent an attacker from striking again.”

READ MORE: Huntress recently expanded its reach in the African market through a distribution partnership with QBS Software Africa.

Jordan Smith

Jordan Smith is an enterprise technology and cybersecurity journalist with nearly a decade of experience covering B2B IT, federal technology, artificial intelligence, cybersecurity, cloud computing, and emerging digital trends. His reporting helps business and technology leaders understand how new technologies, security challenges, and infrastructure decisions affect modern organizations. Jordan has reported on enterprise and public-sector technology for TechnologyAdvice, HCLTech, MeriTalk, and Channel Insider. His background spans cybersecurity, cloud infrastructure, AI adoption, digital transformation, and federal IT initiatives, giving him a broad perspective on the tools, policies, and innovations shaping today’s technology landscape. Before joining TechnologyAdvice, Jordan served as a Senior Technology Reporter at MeriTalk, where he covered the federal IT space, and later worked as a US Regional Reporter and Copy Editor/Writer for HCLTech. His experience across reporting, copyediting, podcasting, and event moderation allows him to translate complex technical topics into clear, timely, and useful insights for business audiences. Jordan holds a Master of Arts in Journalism from the University of Nebraska–Lincoln and a Bachelor of Science in Criminal Justice and Psychology from Edgewood University. Through his work, he helps readers stay informed about cybersecurity developments, enterprise technology trends, and the business impact of emerging IT solutions.

Channel Insider Logo

Channel Insider combines news and technology recommendations to keep channel partners, value-added resellers, IT solution providers, MSPs, and SaaS providers informed on the changing IT landscape. These resources provide product comparisons, in-depth analysis of vendors, and interviews with subject matter experts to provide vendors with critical information for their operations.

Property of TechnologyAdvice. © 2026 TechnologyAdvice. All Rights Reserved

Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.