Huntress

Cybersecurity United States Website Reviewed Sept. 22, 2026

Managed detection and response, EDR, ITDR and security awareness training delivered through a 24/7 SOC, built primarily for MSPs and SMBs.

Certifications & Accreditations

Certification Certifying Body Scope Achieved Expiry Status
SOC 2 Type 2 Not published Listed on the Huntress trust centre; report gated. Auditor, period and scope not published. — — Current
CMMC documentation package Not a certification Shared Responsibility Matrix and Operations Plan published; trust centre notes a CMMC Phase II suspension as of July 2026. — — Current

Compliance Frameworks

SOC 2 Type 2
Partial
SOC 2 Type 2 confirmed to exist but gated; auditor and period not published.
GDPR 2016/679
Partial
DPA, Security Addendum and sub-processor list all behind trust-centre gating.

Contact & Responsible Disclosure

Assurance position

**No public evidence of ISO 27001.** SOC 2 Type 2 is the only attestation, and its report, auditor and period are gated behind the trust centre.

**No public evidence** of a breach or exploited vulnerability in Huntress’s own products. Note that Huntress is a CVE Numbering Authority and publishes research on *other* vendors’ flaws (including N-able N-central) — those are not Huntress incidents.

Assess Huntress in your own vendor risk programme

SnapGRC lets you send security questionnaires, track DPA status, manage sub-processors, and maintain a supplier risk register — all audit-ready.