CISO Tribune

Vendor comparison · 2 companies

Huntress vs Kroll

Huntress products are built to protect organizations of all sizes. Kroll is a global financial and risk advisory firm. CISO Tribune files both under MDR and managed SOC. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Huntress
  • Kroll
Huntress vs Kroll: Products, Customers and Funding Compared
HuntressHuntress products are built to protect organizations of all sizes.huntress.comKrollKroll is a global financial and risk advisory firm.kroll.com
What it sells
  • Managed EDR[1][2][5]Provides 24/7 protection, detection and response that disrupts and remediates threats.
  • Managed ITDR[1][2][5][6][7]Detects, responds to and resolves identity-based threats such as account takeovers and business email compromise.
  • Managed SAT[1][4][6][8]Provides security awareness training with learning plans and phishing campaigns built by Huntress.
  • Enterprise Security Risk Management[7]A Kroll team for proactive threat and risk mitigation and crisis response.
  • Kroll Responder MDR[1][5]Managed detection and response with 24/7 security monitoring.
  • Cyber Risk Retainer[1][5]A retainer with credits usable across Kroll's professional services portfolio.
  • Cybersecurity Risk Assessments[16]Reviews of an information security program using the NIST Cybersecurity framework as guidance.
  • Complex Digital Events[15]Bespoke services for complex incident response, regulatory investigations and litigation support.
  • Enterprise Risk Retainer[14]A retainer for cyber insurance partners and their clients.
  • AI Report Validation[18]Independent verification of AI-generated research by investigators.
Categories
Headquarters
Not stated on its pagesNew York, United States[2][10][12]
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Not stated on its pagesNot stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • June 30, 2026Huntress made its Managed Identity Security Posture Management product generally available.[13]
  • November 18, 2025Huntress acquired Inside Agent, a London-based company focused on hardening Microsoft 365 environments.[12]
  • August 31, 2026Kroll launched APEX, a capability on the CrowdStrike Falcon platform that quantifies effort, cost and value of AI and automation for cyber investment decisions.[11]
  • July 15, 2026Kroll acquired ABC economics, an economics and competition advisory firm headquartered in Berlin, Germany.[12]
  • January 29, 2026Kroll launched two new practices, Kroll Economics and Decision Intelligence.[9]
  • November 17, 2025Kroll completed its acquisition of Madison Pacific, a corporate trust and agency services specialist headquartered in Hong Kong.[10]
G2 and Gartner Peer Insights
  • G2: listed, seen November 10, 2026[13]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Not written yetKroll supports thousands of law firms and corporate cyber clients. Kroll's Cyber Insurance Services Team serves carriers, brokers, breach counsel and policyholders. Kroll offers a baseline review aimed at small and medium businesses. Kroll performs security assessments for global clients from nearly every industry and government agency. Kroll's M&A advisory team works with public corporations, private equity investors, financial sponsors, family-owned businesses and other private companies in middle-market transactions.
Last verified
November 8, 2026September 27, 2026

Where they overlap

  • Huntress and Kroll are both filed under MDR and managed SOC.

Where they differ, field by field

  • Huntress's primary category is MDR and managed SOC; Kroll's is Incident response and forensics.
  • Huntress is also filed under EDR and XDR, Identity threat detection and response and SIEM.
  • Huntress lists Managed EDR, Managed ITDR and Managed SAT. Kroll lists Enterprise Security Risk Management, Kroll Responder MDR, Cyber Risk Retainer, Cybersecurity Risk Assessments, Complex Digital Events and 2 more.
  • Kroll is headquartered in New York, United States.

What it sells: Huntress

What Managed ITDR does[1][2][5][6][7]
Huntress Managed ITDR is designed to detect, respond to and resolve identity-based threats such as account takeovers, business email compromise and unauthorized logins. Huntress Managed ITDR covers the continuous monitoring side of identity and access requirements in Microsoft 365 and Google Workspace. Huntress Managed ITDR is built to detect existing malicious inbox rules from the moment a tenant is onboarded.
What Managed SAT does[1][4][6][8]
The Huntress Managed SAT platform provides short episodes featuring storylines that train learners on security awareness topics. The Huntress team can fully manage a customer SAT program, including creating, curating and scheduling learning. Huntress builds monthly learning plans and phishing campaigns based on the threats compromising people every day. Huntress Managed SAT integrates with email, Slack and Microsoft Teams to notify users about learning assignments.

What it sells: Kroll

What Enterprise Security Risk Management does[7]
Kroll's global Enterprise Security Risk Management team works on proactive threat and risk mitigation and reacts to crises, offering personnel, expertise, advisory and bandwidth. Kroll's Threat Life Cycle Management uses end-to-end cyber and physical risk solutions to uncover exposures, validate defenses, implement new or updated controls and fine-tune detections. Kroll describes itself as senior advisers to clients on all security and threat-related issues.
What Kroll Responder MDR does[1][5]
Kroll Responder MDR delivers 24/7 security monitoring and response that includes understanding the root cause, hunting for further evidence of compromise and eradication. Kroll Responder MDR for Microsoft provides enriched MDR for Microsoft Security. Kroll offers a complimentary $1 million incident protection service warranty with no vendor-specific hardware requirement.
What Cyber Risk Retainer does[1][5]
Kroll offers a Cyber Risk Retainer with credits that can be used across its professional services portfolio. Kroll states that up to 20% of unused services credit may be applied to the following year upon renewal. Kroll's retainer includes access to a global team of 700+ incident response, litigation and breach notification experts.
What Cybersecurity Risk Assessments does[16]
Kroll's Cybersecurity Risk Assessments include a detailed review of the information security program, from policies and procedures to technical controls, including people, processes and technologies. At the conclusion of an assessment, clients receive a summary report designed to communicate security posture to senior management. Kroll offers a baseline review aimed at small and medium businesses.
What Complex Digital Events does[15]
Kroll provides bespoke services for complex incident response, regulatory investigations, litigation support, board-level engagements and national security matters. Kroll's Complex Digital Events services use a combination of non-practising attorneys and technical experts to guide and deliver complex investigations. Kroll provides forensic investigations and expert testimony supporting data breach litigation, trade secret/intellectual property theft and employment disputes.
What Enterprise Risk Retainer does[14]
Kroll offers an Enterprise Risk Retainer to cyber insurance partners and their clients. The retainer includes a pre-negotiated agreement for instant access to risk expertise. The retainer includes service credits to proactively strengthen risk posture before an incident occurs.
What AI Report Validation does[18]
Kroll's AI Report Validation practice centers investigators who deconstruct AI-generated narratives, test their claims against professional-grade sources and determine what was fabricated, distorted or omitted. Kroll conducts original research to fill gaps.

Questions about Huntress and Kroll

What do Huntress and Kroll sell?
Huntress sells Managed EDR, Managed ITDR and Managed SAT. Kroll sells Enterprise Security Risk Management, Kroll Responder MDR, Cyber Risk Retainer, Cybersecurity Risk Assessments, Complex Digital Events and 2 more.
Are Huntress and Kroll in the same category?
They share MDR and managed SOC. Huntress's primary category is MDR and managed SOC and Kroll's is Incident response and forensics.
Where are Huntress and Kroll headquartered?
Kroll is headquartered in New York, United States.
Who are Huntress and Kroll sold to?
Kroll supports thousands of law firms and corporate cyber clients.
What have Huntress and Kroll announced recently?
June 30, 2026: Huntress made its Managed Identity Security Posture Management product generally available. August 31, 2026: Kroll launched APEX, a capability on the CrowdStrike Falcon platform that quantifies effort, cost and value of AI and automation for cyber investment decisions.

About Huntress

Huntress products are built to protect organizations of all sizes. Huntress security experts manage endpoints and identities for over 285K organizations.[4]

Huntress Managed EDR provides 24/7 coverage with human threat hunters who validate threats. Huntress Managed ITDR is designed to detect, respond to and resolve identity-based threats such as account takeovers, business email compromise and unauthorized logins. Huntress Managed ITDR covers the continuous monitoring side of identity and access requirements in Microsoft 365 and Google Workspace. Huntress Managed ITDR detects identity-based techniques such as adversary-in-the-middle attacks, business email compromise and MFA bypass.[1][5][6]

Huntress Managed ITDR is built to detect existing malicious inbox rules from the moment a tenant is onboarded. Huntress telemetry includes signals from both Azure Active Directory and Microsoft Exchange, covering events from role escalations to suspicious inbox rules and mailbox permission updates.[7]

Learning Mode previews policy impact before anything changes.[3]

The Huntress Managed SAT platform provides short episodes featuring storylines that train learners on security awareness topics. The Huntress team can fully manage a customer SAT program, including creating, curating and scheduling learning. Huntress builds monthly learning plans and phishing campaigns based on the threats compromising people every day. Huntress Managed SAT integrates with email, Slack and Microsoft Teams to notify users about learning assignments. Huntress Managed SAT syncs with an identity provider to keep employees updated in the Huntress platform. Huntress offers a Custom Content Creator Tool for training teams on elements of the business that go beyond SAT. Huntress Managed Security Awareness Training for GDPR teaches employees about GDPR privacy compliance in less than 10 minutes. Huntress Phishing Simulated Training corrects users in the moment when they fail a phishing test.[1][3][4][5][8][9]

Inside the Huntress 24/7 SOC, a proprietary AI-powered investigation system assists with investigating, correlating and summarizing, while in-house analysts own the decisions that demand human expertise. Athena is built to work alongside the human SOC experts at Huntress. Athena gathers context, connects telemetry and drafts incident reports before a human looks at the investigation. Athena groups behavior across endpoints, identities, logs and users into a single investigation. More than 40 specialized agents run the same playbooks and guardrails the Huntress analysts use. Huntress states that AI is a tool to augment human expertise, not replace it. The Huntress Adversary Tactics and SOC teams work together by hunting, tracking and analyzing novel threats around the world.[1][11]

Huntress makes compliance support accessible to all businesses, including those undergoing CMMC Level 2 audits. Huntress combines managed endpoint, identity and log monitoring with 24/7 AI-centric SOC review. Managed SAT tracks whether employees complete training, flags risky behaviors and produces participation records. Huntress is channel-first, and most teams purchase Huntress through a partner. Huntress offers partner pricing to MSPs and resellers through its partner program. Huntress pricing is based on the number of endpoints, identities, learners and data sources.[1][3][6][7][8][10]

Huntress on the record

Sources

Huntress full record

  1. [1]huntress.comHuntress · huntress.com · undated page, accessed November 8, 2026 · Tier A
  2. [2]Managed Security Platform with 24/7 AI SOC | HuntressHuntress · undated page, accessed November 10, 2026 · Tier A
  3. [3]EDR, ITDR, SAT & SIEM Pricing With 24/7 SOC | HuntressHuntress · undated page, accessed November 10, 2026 · Tier A
  4. [4]Cyber Security Awareness Training Content | HuntressHuntress · undated page, accessed November 10, 2026 · Tier A
  5. [5]How to Implement an Effective Secure Remote Work Strategy? | HuntressHuntress · undated page, accessed November 10, 2026 · Tier A
  6. [6]Compliance Monitoring Made Practical: How Managed EDR, ITDR, and SIEM Support Your Audits. \ | HuntressHuntress · undated page, accessed November 10, 2026 · Tier A
  7. [7]Find Hidden Inbox Rules in Microsoft 365 | HuntressHuntress · undated page, accessed November 10, 2026 · Tier A
  8. [8]Manage Human Risk with Huntress SAT | Expert-Backed Training | HuntressHuntress · undated page, accessed November 10, 2026 · Tier A
  9. [9]GDPR Compliance Security Awareness Training for Employees | HuntressHuntress · undated page, accessed November 10, 2026 · Tier A
  10. [10]SAT Pricing | HuntressHuntress · undated page, accessed November 10, 2026 · Tier A
  11. [11]How Huntress Uses AI Responsibly in Cybersecurity | HuntressHuntress · undated page, accessed November 10, 2026 · Tier A
  12. [12]Huntress Acquires Inside Agent to Strengthen Identity Security Posture Management | HuntressHuntress · published November 18, 2025 · Tier A
  13. [13]Huntress Announces the General Availability of Managed ISPM, Expanding its Agentic Security Platform with Proactive Controls that Strengthen Identity Resilience at Scale | HuntressHuntress · published June 30, 2026 · Tier A
  14. [14]Huntress Managed EDR Reviews & Product DetailsG2 · undated page, accessed November 10, 2026 · Tier C
  15. [15]Huntress Reviews, Ratings & Features 2026Gartner Peer Insights · undated page, accessed November 10, 2026 · Tier C

Kroll full record

  1. [1]Cyber riskKroll · kroll.com · published October 16, 2025 · Tier A
  2. [2]Kroll Announces Formation of Kroll Business ServicesKroll via Business Wire · businesswire.com · published April 20, 2021 · Tier A
  3. [3]Kroll | Financial and Risk Advisory SolutionsKroll · undated page, accessed October 26, 2026 · Tier A
  4. [4]Risk AdvisoryKroll · undated page, accessed October 26, 2026 · Tier A
  5. [5]Cyber Security Services | Cyber & Data Resilience | KrollKroll · undated page, accessed October 26, 2026 · Tier A
  6. [6]Application Security Services (AppSec) | Cyber and Data ResilienceKroll · undated page, accessed October 26, 2026 · Tier A
  7. [7]Enterprise Security Risk Management (ESRM) | KrollKroll · undated page, accessed October 26, 2026 · Tier A
  8. [8]Investigations, Diligence and Compliance | KrollKroll · undated page, accessed October 26, 2026 · Tier A
  9. [9]Kroll Launches New Practices Leveraging Technology and AI to Accelerate Decision-Making and Achieve Competitive AdvantageKroll · published January 29, 2026 · Tier A
  10. [10]Kroll Completes Acquisition of Madison Pacific GroupKroll · published November 17, 2025 · Tier A
  11. [11]Kroll Introduces APEX to Drive Measurable Business Outcomes from AI InvestmentKroll · published August 31, 2026 · Tier A
  12. [12]Kroll Bolsters Global Economics Capabilities with Acquisition of ABC economicsKroll · published July 15, 2026 · Tier A
  13. [13]Kroll Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 26, 2026 · Tier C
  14. [14]Cyber Insurance Services | Incident Response Partner | KrollKroll · undated page, accessed November 10, 2026 · Tier A
  15. [15]Complex Digital Events | Cyber and Data Resilience | KrollKroll · undated page, accessed November 10, 2026 · Tier A
  16. [16]Cyber Risk Assessments | Cyber Risk | KrollKroll · undated page, accessed November 10, 2026 · Tier A
  17. [17]Data Risk, Discovery & Litigation Support | Cyber & Data Resilience | KrollKroll · undated page, accessed November 10, 2026 · Tier A
  18. [18]AI Report Validation | KrollKroll · undated page, accessed November 10, 2026 · Tier A
  19. [19]M&A Advisory Services | Corporate Finance | KrollKroll · undated page, accessed November 10, 2026 · Tier A
  20. [20]Valuation Services | Valuation AdvisoryKroll · undated page, accessed November 10, 2026 · Tier A
  21. [21]Business Valuation Services | KrollKroll · undated page, accessed November 10, 2026 · Tier A

Spot a factual error? Request a correction.