Managed SIEM
Marcel Pawlowski isn’t just any security engineer. He’s a thinker. And a tinkerer. As part of Microtime—a growing managed service provider (MSP) securing everyone from small and mid-sized businesses (SMB) to government entities—he’s no stranger to tackling big challenges head-on.
As Microtime’s client base grew, so did the complexity of their security infrastructure. The small yet powerful team of four was soon bogged down by incomplete solutions from multiple vendors, including a well-known tool that couldn’t integrate with Microsoft Defender. The result was a flood of false positives, alert fatigue, and an overworked security team trying desperately to separate the noise from the real threats. It just wasn’t sustainable.
Marcel knew they needed something better—an affordable multi-tenant tool that could handle log ingestion and deliver actionable alerts. That’s when he pinpointed the missing piece in Microtime’s portfolio—security information and event management (SIEM).
This missing piece isn’t just a nice-to-have. A SIEM is the backbone of any MSP’s security operations, essential for collecting log data, ensuring compliance, meeting cyber insurance requirements, detecting threats, and keeping tabs on everything happening in a network. Yet, for Marcel, a “perfect” SIEM was nowhere to be found. So, he rolled up his sleeves and did what he does best—build his own.
But as Marcel dove in, he had a stark realization. “I just knew that being the only person developing and maintaining the system would become unreasonable and cost a ton of time and energy,” he says. In other words, this wasn’t a project for the faint of heart.
Building a SIEM from scratch is no walk in the park, but this undertaking was about more than just Marcel’s can-do attitude. It was about the safety of his clients, so he proudly poured hundreds of hours into research, system development, coding, and quality assurance. He got so far as building out a dedicated system that contained the log storage mechanism, the log indexer, and the dashboard functionality, all built on the ELK (Elastic, Logstash, and Kibana) stack.
Despite Marcel’s successful build, the time and energy he was investing made all his other responsibilities unmanageable. The DIY approach had reached its limits. It can’t be overstated that Marcel is no quitter, but after giving it all he had, he knew he had to explore options that could help him level up faster. He admits, “Implementing and maintaining a SIEM is nearly impossible and prohibitively expensive for an MSP, especially one managing a plethora of SMB environments.”
After scouring the market for a game-changing solution, Marcel discovered Huntress had just released their Managed SIEM. “Huntress offered an incredibly reasonable price for the functionality, so it was a no-brainer,” Marcel explains. Having relied on Huntress products in the past, he was hopeful he may have finally found Microtime’s “perfect” fit.
“The value of the product is the biggest benefit. For a fraction of the cost of other security tools, it tends to perform far better than any other SIEM in my experience.” - Marcel Pawlowski, Security Engineer, Microtime
Within weeks of deploying Managed SIEM, Microtime caught an adversary red-handed, easily tracing login attempts, tracking initial access, and locating attack vectors. They booted the attacker out of the environment and secured the system before the threat actors could do any damage.
From that experience alone, the impacted client elected to keep Microtime’s latest security tool in place. Because Microtime was now the only MSP in the area with SIEM capabilities, the client’s internal IT department also felt that their environment had become far more secure.
And that was just the start. Managed SIEM easily cut through all the clutter, pinpointing real threats without drowning Marcel and his team in false alarms.
“The biggest benefit to our day-to-day security is that we don’t have to divert any of our duties to managing it,” says Marcel. “And we don’t need to invest in more threat analysts because we have a second set of eyes on everything. With Huntress, I sleep easier at night.”
For Marcel, Huntress is about more than the tools. It’s also about the tribe. He values the Huntress community, where he can consistently find friendly, reliable support 24/7. “Huntress isn’t like most security companies who believe they have some pedigree to maintain,” he says. “They’re genuine people here to help and push the industry forward.”
Marcel and his team at Microtime have found a true partner in Huntress. In fact, he declares Huntress is now “the cornerstone of our security stack.” With Managed SIEM, Microtime can consolidate their security operations, reduce operational strain, and scale effectively, all while maintaining profitability. Simply put, Managed SIEM provides actionable intelligence without overwhelming smaller security teams, making it an ideal fit for a growing MSP like Microtime.
“With Huntress, I sleep easier at night.” - Marcel Pawlowski, Security Engineer, Microtime
Microtime provides a plethora of industry-leading solutions and collaborative tools tailored to improve employees’ and customers’ experiences. Their team understands that technology is at the core of any business operation, so they work hard to eliminate recurring issues and infrastructure vulnerabilities.
See how the global Huntress SOC can augment your team with 24/7 coverage and unmatched human expertise. Start your free trial today.
