Skip to main content

Huntress Managed ISPM - Product Overview

Nick Gusto
  • Updated

Team: Huntress Managed Identity Security Posture Management (ISPM)
Product: Huntress Managed ISPM
Environment: Microsoft 365
Summary: Learn how Huntress Managed ISPM monitors, hardens, and maintains security configurations across Microsoft 365 environments.

 

In This Article

What Is Managed ISPM?
Before You Begin
What Does Managed ISPM Cover?
How Does Managed ISPM Work?
Deployment Options
 

What Is Managed ISPM?

Huntress Managed Identity Security Posture Management (ISPM) identifies configuration weaknesses and enforces recommended security baselines across Microsoft 365 environments.
 

Managed ISPM uses a Huntress-maintained identity security framework to:

  • Assess Microsoft 365 tenant configuration settings.

  • Identify configuration settings that do not align with recommended security practices.

  • Deploy selected security controls across connected organizations.

  • Detect configuration drift in real time.

  • Continuously enforce supported controls when enabled.

  • Preserve the previous state of supported settings so you can revert changes when needed.
     

Important: Managed ISPM reduces the manual workload of identity security configuration, but it does not replace routine Microsoft 365 administration, active incident response, or organizational identity governance.

 

Before You Begin

Review the following prerequisite resources before configuring Managed ISPM:

  • Readiness and Requirements

  • Managed ISPM Onboarding Guide

  • Fast Start Rollout Guide

  • Managed and Modified Deployments

 

What Does Managed ISPM Cover?

Managed ISPM evaluates the security posture of cloud identities across Microsoft 365 and Microsoft Entra ID.
 

Coverage includes controls across areas such as:

  • Microsoft Entra ID

  • Conditional Access policies

  • Authentication and administrative protections

  • User and guest access protections

  • Exchange Online

  • SharePoint Online and OneDrive

  • Microsoft Teams
     

The control library evolves as Huntress updates, expands, or retires specific posture controls. Review each individual control description in the Huntress Platform before deployment.

 

How Does Managed ISPM Work?

Managed ISPM continuously reconciles your tenant configurations against curated security controls through a five-stage workflow:

  1. Connect the tenant: In the Huntress Platform, authorize and connect your Microsoft 365 organization.

  2. Evaluate configuration: Huntress imports and evaluates tenant configuration data against the posture framework.

  3. Review posture findings: View detected gaps, security risks, and recommended controls in the ISPM dashboard.

  4. Choose deployment strategy: Select how controls deploy across your accounts and organizations based on your operating model.

  5. Enforce and monitor: Huntress monitors for configuration drift and automatically restores supported controls to their compliant state.

 

Deployment Options

Managed ISPM provides three deployment modes to fit your management model:

  • Managed Deployment: Huntress maintains the baseline control selection and automatically adds eligible controls as new capabilities are released.

  • Modified Deployment: You manually select and maintain the active control selection for the account and its organizations.

  • Off: Automated deployment is disabled. Findings remain visible in the dashboard, but Huntress does not deploy or enforce controls.
     

You can also exclude an individual control for a specific organization without changing that organization's broader deployment mode.

 

Related articles