Huntress Labs is a security company building a Managed Detection and Response (MDR) product. We enumerate the capabilities operating systems provide for software developers to have their applications automatically started when a computer boots or when a user logs in. We then process this data to find known-good applications and sift through the remaining to find attacker footholds missed by antivirus products. Our custom algorithms (no neural-nets here) are designed to trigger on unique indicators that allow us to differentiate between legitimate and suspicious/malicious applications. When we find something malicious, we send an alert to our customer with detailed step-by-step instructions on how to remove the infection.
We have nearly 400 customers who love our product, have more than $2.5M in ARR, and add 30-40 new customers each month.
We continue to build our team with experienced individuals: the co-founding team previously worked in offensive security at the National Security Agency and the sales team is comprised of proven senior sales executives that previously worked at a company acquired by Cisco.
We're using our skills to build a great company an engineering team to tackle tough engineering problems and reducing the effectiveness of malicious software. Work on interesting stuff and make the internet a safer place. Win - win!
Since our engineering team is still small we don't have explicit sprints, although we're not opposed to them. We still follow an agile workflow tracking tickets in PivotalTracker so we can organize what needs to be worked and see who is working on which tickets. We work closely with the Sales team and the Threat Ops teams to understand what functionality they need to be successful. We treat the other teams as customers of our product, which means that we try to build features for them and they have influence and input to the roadmap but they don't dictate to us what we should be working on. We use GitHub to store our code and utilize Pull Requests to conduct code reviews. We setup CircleCI to perform continuous integration testing and will soon utilize the deployment capabilities to automatically deploy to the production environment builds when all tests pass. We believe in moving fast while trying not to break too many things so we push to production multiple times a day. Technical debt is real and we take time to pay off that debt by refactoring code as needed without complete support from all stakeholders. We believe it's important to have a clean and up-to-date code base to work from so we can be productive and happy engineers.
Huntress is deployed to hundreds of thousands of computers across the globe, each of which has thousands of applications, system components, and utilities registered to start when the computer boots up or a user logs in. Processing and storing all of these relationships requires careful thought and a good understanding of the technologies that underpin the Huntress platform. We run large PostgreSQL instances and continuously analyze and tune our queries and schema to ensure we can quickly access the large amounts of data we store.
The relationships we track allow us to see unique patterns and give us additional context about persisting applications which we use to identify known-good, suspicious, and malicious applications that other security products struggle to identify. These relationships are key to our success and continue to grow as we build and improve the system. We need to be able to quickly and efficiently navigate these relationships to ascertain new and interesting details about the applications installed in order to make decisions about the viability and trustworthiness of each application.
One major upcoming project is designing and building a customer facing API. Now that we better understand our data, how it is used, and how our customers would want to retrieve it, we are ready to build.
Currently when we detect an incident we provide our customers with an alert that contains remediation steps they can take to remove the malware infection. This was a great starting point and continues to work well but we want to take our product to the next level and build an automated remediation system that is capable of executing these steps without the need for any user interaction.
We love to integrate with other applications to make it easy for our customers and internal teams to utilize other applications. We integrate with Hubspot, PagerDuty, and other systems our customers use to manage their businesses. We plan to add even more integrations and build on the integrations we currently have.
We have a laundry list of features and improvements on our roadmap but we're always looking for our engineers to help discover new ideas we can turn into features that our customers will love.
We value transparency and fairness. This extends to our customers where we clearly explain why we've made business decisions, what our product does, and how we do it without misrepresenting the facts. We form partnerships with our customers rather than simply monetary transactions and it shows in the feedback and reviews we receive.
As an early-stage startup (is 3.5 years still considered early?) we're scrappy when we need to be. Whether it's doing things that don't scale (putting in extra effort to help a customer devastated by ransomware) or staying in a 3 bedroom time-share for a week rather than at the conference hotel for 10x the cost, we find ways to make a big impact without breaking the budget. We believe that keeping the customers best interests in mind we can continue to build trust and respect with our customers, which allows the product and company to speak for itself.
Even though many of our employees work remotely, we have a very collaborative culture which helps to offset any feelings of isolation. We routinely jump on video calls to work together to discuss features, code review, pair program, or when we have something we want to show off.
We believe in work-life balance and chose to offer an explicit vacation policy rather than the trap of unlimited vacation. Full-time employees enjoy 3 weeks vacation, 40 hours sick leave, and 10 US federal holidays each year.
Twice a year we have all-hands retreats that last for most of the work week. We call these Summer and Winter Summits. This gives us a chance to bond and work closely with all members of the team since Huntress has a large number of employees working remotely.
We offer a matching 401(k) plan up to 5% of compensation immediately vested because none of us want to work forever.
Many of us are parents so we understand the need for flexibility when caring for your children and family. This fits well with our remote culture. Even employees who live near and work at an office, work from home when they need to.
We believe in treating employees like adults and giving them the freedom to work around their schedule and busy lives to help maintain the work-life balance. The team is always available to collaborate during the day without needing strict core hours.
We provide full medical, dental, and vision coverage and fund 99% of the cost for the employee (insurance company won't let us pay 100% due to some strange rule).
Interested in this company?
Skip straight to final-round interviews by applying through Triplebyte.