Integrations

It would be nice to have an integration with NinjaOne US.

We would like to see a billing integration between Huntress and HaloPSA. Ideally this would push license counts for all Huntress products (EDR, ITDR, SAT, SIEM) to each of our customer records in HaloPSA and allow us to link the invoice quantities with licenses in use.

Please add native integration with Microsoft Teams Workflows for Huntress Labs to send EDR and ITDR notifications directly to Teams channels. This would allow IT and security teams to receive real-time alerts within their existing communication platform, improving response times and reducing the need to rely solely on email or the Huntress dashboard—especially when technicians are mobile or onsite. Ideally, the integration should support the same notification format currently used for email and ConnectWise PSA, with options for channel targeting via Teams Web Link. Best Case Scenario: For IT teams that are constantly onsite or in the field, email alerts can be easily overlooked or delayed due to limited inbox access. A Teams integration ensures alerts are delivered as instant, high-visibility messages where technicians are already collaborating—resulting in faster acknowledgment and resolution of critical threats.

This update will post correct SAT usage into the integrated PSA system for easier and more accurate billing

Ability to create email integrations at the organization level so incident reports for certain organizations will be sent to them and not the account level emails.

You now close tickets for incidents, but please can you also close automatically tickets for escalations and unwanted access when resolved.

Can you show the ticket number in the incident when its created in Huntress?

This update looks to make SIEM easier to operationalize by adding Billing support for PSA integrations and APIs

It would be huge if we could get Huntress to link up with BrightGauge for report consolidation

An additional integration option for event updates that initiates a HTTPS callback and posts detailed JSON data about the event. It will allow faster response and wider range of integration options and much more preferable then having to parse an email.