Protect the accounts your business runs on.

Identity threat detection and response (ITDR), powered by Huntress.

Your email and cloud accounts hold conversations, files and access to the tools your team uses every day. StratIS helps you add a watchful layer around those accounts, with Huntress specialists looking for signs that someone else has found a way in.^[1]

Talk about account protection

Already a client? Get support

An unfamiliar sign-in, a human review, a possible response

An illustrative account-protection sequence, not a real incident. Read the three steps from top to bottom.

Sign-in from an unfamiliar location
It could be you travelling, or someone else using your work account.
Huntress investigates
A specialist reviews the sign-in and related account activity.
Restrict access if needed
Account access can be restricted where supported and authorised.

Illustration, not a live security feed. Response depends on supported systems and authorised settings.

A valid login is not always the right person.

An attacker does not always need to break into a computer. They may sign in with a stolen password or take over an existing signed-in session. ITDR looks for suspicious account activity that needs investigation, even after access has been gained.^[1]

How it helps.

Technology backed by people, with clear responsibilities.

Spot unusual account activity

Huntress looks for behaviour such as suspicious sign-ins, signs of account takeover and email rules that could help an attacker hide what they are doing.^[1]

Have a person investigate

Huntress's security team monitors supported environments around the clock and investigates identity threats. The aim is useful context and a response, not another dashboard for your staff to watch.^[1]

Respond with a clearer next step

Huntress provides threat response and remediation guidance. Available actions depend on the connected platform, permissions and configuration.^[1]

Make it fit your business

StratIS helps you work out which accounts need protection and how the service fits your existing IT. Before setup, we agree the scope, access and escalation arrangements.

What that can look like in practice.

Someone gains access to an employee's email and creates a rule that hides messages about an invoice. They then try to change the payment instructions. ITDR is the layer watching for account behaviour that may point to that kind of takeover. It is not a guarantee that every fraudulent message or payment request will be caught.

Illustrative scenario, not a StratIS client incident or a promised outcome.

A few useful questions.

Clear answers, without the scare tactics.

We already use multi-factor authentication. Do we still need this?

Keep using multi-factor authentication. It is an important layer. Some attacks steal a signed-in session rather than just a password. ITDR adds monitoring for suspicious activity after someone has gained access; it does not replace safer sign-ins.^[1]

Does this cover Microsoft 365 or Google Workspace?

Huntress Managed ITDR supports Microsoft 365 and Google Workspace. We confirm which accounts, features and connections are appropriate for your environment before agreeing coverage.^[1]

Is this the same as protecting our computers?

No. ITDR focuses on account activity. EDR focuses on activity on covered computers and servers. They address different parts of the problem and can work together. See managed computer protection

Does round-the-clock monitoring mean StratIS support is available 24/7?

No. The round-the-clock security monitoring described here is provided by Huntress. StratIS support hours, escalation contacts and any additional incident work are agreed separately.

One layer, not a promise of complete safety.

ITDR does not replace staff judgement, careful payment verification, secure account settings or backups. We also need to review the access and security data the service uses before connecting it to your business.

Start with the accounts you depend on.

Tell us which email platform you use, roughly how many people need access and what concerns you. We can discuss a sensible next step. Do not send passwords or private account details.