Security explained
Managed detection and response: who investigates and who can act?
MDR adds a service process around detections. Agree its coverage, responsibilities and limits before an incident.
A detection needs a response owner
Managed Detection and Response, or MDR, combines security technology with managed investigation and response. It is a service relationship, not simply another application installed on a computer. The contract still needs to explain which assets are covered and what action is authorised.
FutureMSP uses Huntress for its managed-detection service. That supplier relationship does not make every business device covered automatically. Onboarding, supported systems and agreed responsibilities define the client service.
Questions worth settling in advance
Ask who receives a finding, how it is assessed and how your business is contacted. Identify a backup decision maker if the usual contact is unavailable. Agree which containment actions can be taken under existing authority and which require an additional decision.
Also separate detection and containment from wider incident recovery. Restoring applications, investigating a complex compromise or coordinating other suppliers can require additional scope. Confirm those boundaries rather than assuming that the word managed includes every possible task.
Supplier monitoring is not your helpdesk agreement
A supplier's published operating model does not establish FutureMSP's support hours or a guaranteed resolution time. Your service schedule must explain the support and escalation arrangements that apply to your business. Use the current service comparison to check availability, then agree the covered systems and response arrangements before choosing a service.
No managed service can guarantee that every threat will be detected. Keeping an accurate device inventory and current escalation contacts helps make the response process usable.
Questions you may have
Is Huntress the same as the FutureMSP service desk?
No. Huntress supplies managed-detection capabilities. FutureMSP's client-support responsibilities, hours and escalation arrangements are agreed separately.
Does MDR mean a device can always be isolated without asking?
Response authority must be agreed. Containment can affect business operations, so the service needs clear permissions and escalation contacts.
Explore related services
- IT Service Management
- Antivirus and Endpoint Detection and Response (AV / EDR)
- Managed Detection and Response (MDR)
- Dedicated Priority Support Number
- Emergency Mobile Number
Sources and further reading
- https://www.huntress.com/platform/managed-edr
- https://www.cisco.com/site/us/en/learn/topics/security/what-is-managed-detection-and-response-mdr.html
Sources reviewed 22 October 2026. Product capabilities do not establish your contracted FutureMSP coverage.
