Case Study: Huntress cuts SIEM costs and boosts performance with ClickHouse Cloud

How Huntress improved performance and slashed costs with ClickHouse

Huntress, a managed security platform serving small and mid-sized businesses, needed a better way to process massive volumes of security logs from millions of endpoints and hundreds of thousands of data sources. As the company grew, its SIEM workload became expensive and complex to scale with tools like Elasticsearch and Postgres, while still needing fast, reliable threat detection for customers with limited IT resources.

By moving to ClickHouse Cloud, Huntress simplified its data infrastructure and gained a scalable, low-maintenance analytics engine for its SIEM pipeline. With ClickHouse, the team now ingests up to 200,000 records per second, improved query performance, and cut monthly infrastructure costs by more than 90%—from about $70K with Elasticsearch to around $5K for a comparable workload.

Huntress

Chris Bisnett

Co-Founder and CTO