What managed detection and response costs for a 5, 10, or 25 person business (2026)

Through Obsidian Ridge, managed detection and response (Huntress Managed EDR with CISSP-led response) costs $15 per device per month, month-to-month, with no minimum, so a 10-device business pays $150 a month plus a one-time $500 onboarding fee. Huntress's SOC monitors and acts 24/7; Obsidian Ridge provides CISSP-led follow-through within one business day, serving the Research Triangle and businesses across the United States.

This is Ridge Watch MDR for a business deployment, priced by device. Ridge Core is MDR plus ITDR, priced by person: Obsidian Ridge's Ridge Core costs $25 per person per month, month-to-month, with no minimum; managed endpoint detection and response and Microsoft 365 or Google Workspace identity monitoring are included. Business onboarding is separate. Huntress's SOC monitors and acts 24/7; Obsidian Ridge provides CISSP-led follow-through within one business day, serving the Research Triangle and businesses across the United States. A person can use more than one computer, so do not substitute headcount for device count when quoting Ridge Watch. Compare the current offers.

The worked business example includes business onboarding. The separate self-service Ridge Watch packages have their own published device-bundle prices and checkout terms; this table does not change those packages or add a business setup fee to a household checkout.

The monthly bill at four device counts

The table uses the standard business MDR rate, before any separately quoted work. Obsidian Ridge publishes this comparison and includes our own service, so it is not an independent ranking. Every total below is calculated from our price data and the published Huntress facts, not typed into the article.

The reseller floor is 50 seats per product. Huntress's in-house-team calculator publishes $8.99 per endpoint per month at 50 endpoints, which gives a $449.50 monthly direct-licence benchmark for every row. That is not a reseller quote. The reseller's final rate is not published in the source, so ask for a quote instead of treating the benchmark as its bill. All counts in this table are at or below the published calculator's first volume band. Source: Huntress pricing.

The point of the minimum is practical: buying fewer deployed agents does not necessarily mean paying for fewer licences. Huntress requires 50 seats per product when bought directly and 50 through a reseller. Its MSP route has no Huntress-required seat minimum. Huntress's standard term is 12 months; an MSP's client-facing terms can differ. Source: Huntress pricing.

What is included and what is extra

Ridge Watch watches the machines, 24/7. Identity monitoring (ITDR) and awareness training are outside this endpoint-only rate. Ridge Core includes MDR and ITDR; awareness training is in Ridge Plus. The managed ITDR overview explains the account coverage, and the MDR overview explains endpoint response.

Business setup is separate and disclosed up front: $500 for up to 25 machines, $1,000 for 26 to 100. Monthly price, billed unit and onboarding are separate lines so a larger machine count cannot quietly change the meaning of “per person.” The pricing page carries the service boundaries and the separate incident-response terms.

Huntress's SOC watches and acts around the clock. Obsidian Ridge handles follow-through within one business day. Do not read “CISSP-led response” as a personal emergency hotline or unlimited recovery work. See who answers what.

What to count before asking for a quote

Count the computers that need an agent, the people who need cloud-account protection and any shared machines. Write down the systems you need covered and who will own an alert after it arrives. That makes a device-based quote and a person-based quote comparable without pretending they cover the same things.

A low licence price does not answer who deploys it, maintains it or follows the incident report. If an insurer is asking for controls, use the cyber-insurance questionnaire to identify the evidence you need, then scope the Readiness Sprint separately if that work is missing.

For a wider shortlist with contract and identity coverage side by side, see best MDR providers for small businesses.

When buying directly costs less

If you have 50 or more endpoints and someone on staff to own alerts, buying Huntress directly is cheaper. We will tell you that on the first call.

That statement compares the endpoint-only licence with the standard device rate above. It does not turn endpoint EDR into the same bundle as Ridge Core's MDR plus ITDR, or price the internal work you would take on. Huntress's direct-buyer responsibilities and current volume rates are on its pricing page.

Sources and pricing scope

• Huntress pricing: rates, volume bands, purchase-route minimums, term and buyer responsibilities. Values flow from the repository's Huntress facts module, checked September 30, 2026.
• Obsidian Ridge pricing: business onboarding, operating responsibilities and Ridge Core's included identity coverage.
• Ridge Watch: the endpoint-only offer and separate self-service packages. This article's business calculation uses the $15/device standard rate confirmed by Obsidian Ridge on October 1, 2026.