Constant vs Huntress for Essential Eight Compliance

Constant and Huntress can both contribute to Essential Eight work, but they solve different problems. This page compares managed detection and security monitoring with maturity assessment, assurance, Australian operations, reporting, and pricing based on publicly available information.

Last reviewed: Sources linked below

A factual comparison

Constant

Constant is an Australian compliance platform designed around continuous evidence collection, AI-assisted pre-review, and certified assessor review. It supports Essential Eight alongside additional security and compliance frameworks.

Huntress

Huntress is a US managed security platform. Its Essential Eight guide describes Managed EDR, Managed ITDR, Managed SIEM, and security awareness training, backed by a 24/7 security operations centre, as ways to monitor controls and retain logs.

The primary difference

Huntress detects threats and retains security events that can support Essential Eight controls. Constant sits above operational tools to assess maturity, link evidence to requirements, manage gaps, and produce a reviewed assurance outcome. The products can be used together.

At a glance

Six major differences for a quick first read. Detailed comparisons and sources follow.

Capability Constant Huntress
Primary focus Continuous compliance and assurance 3 Managed detection and security operations 7
Essential Eight Supported 1 SIEM and detection can support alignment; not an E8 assessment platform 7
Automated evidence collection Automated where connected 3 Retains logs that can be used as evidence 7
Certified assessor review Certified assessor review included 2 Not an assessor service 7
Australian operations Designed and operated in Australia 4 Australian office not stated on the pages reviewed
Published pricing Public pricing planner 5 Public price not stated on the pages reviewed
✓ Verified in published information – Not publicly stated × Explicitly not offered or a different function

Essential Eight and assurance

Framework coverage is different from having a person review whether the evidence supports the claimed maturity level.

Capability Constant Huntress
Essential Eight Supported 1 SIEM and detection can support alignment; not an E8 assessment platform 7
Maturity assessment ML1, ML2, and ML3 1 Maturity model explained; product does not state ML1 to ML3 assessment 7
Certified assessor review Certified assessor review included 2 Not an assessor service 7
Ongoing reassessment Continuous reassessment workflow 1 Continuous monitoring through a managed SOC 7
ASD Essentials Included in the price with Essential 8 6 , 5 Not publicly stated

Evidence and automation

This separates connected collection and automated checks from uploaded evidence and final assessment judgement.

Capability Constant Huntress
Automated evidence collection Automated where connected 3 Retains logs that can be used as evidence 7
Microsoft integrations Supported Microsoft security tooling 1 Managed ITDR covers identity threats; Microsoft 365 scope not fully detailed 7
Evidence uploads Manual upload where not connected 3 Not publicly stated
AI evidence review AI pre-review, then assessor review 2 24/7 AI-centric security operations centre 7
Continuous monitoring Live posture and gap visibility 3 Endpoint, identity, and log monitoring 7
Evidence history Evidence linked to the assessed record 3 Log retention for audits and investigations 7

Compliance management

Planning, ownership, risk, and framework breadth shape how the platform supports work after the first assessment.

Capability Constant Huntress
Control owners Control and remediation owners 3 Guide says ownership matters; product ownership workflow not stated 7
Planner, tasks and due dates Built-in planner, tasks, and due dates 3 SOC provides remediation guidance 7
Reporting On-demand, scheduled, customisable 3 Reporting from monitored security events 7
Risk management Structured risk assessments 3 Threat detection, not a compliance risk register 7
Multiple frameworks Essential 8 and additional frameworks 3 Logs can be mapped to Essential Eight and other requirements 7
Framework mapping Framework-specific control workflows 3 Guide describes mapping controls to existing programs 7

Australian operations

Ownership, operations, data residency, assessors, and support are separate claims and are compared separately.

Capability Constant Huntress
Australian ownership Australian-owned by Steltek Pty Ltd 4 US company, not Australian-owned 8
Australian operations Designed and operated in Australia 4 Australian office not stated on the pages reviewed
Australian data residency Australian data residency 4 Australian customer-data hosting not publicly stated
Onshore assessors Australian assessor review 2 Not an assessor service 7
Australian support hours Australian business-hours support 3 Australian support hours not publicly stated

Commercial

Published pricing and included services can materially change the cost of reaching a reviewed outcome.

Capability Constant Huntress
Published pricing Public pricing planner 5 Public price not stated on the pages reviewed
Implementation assistance Clear assessor-written control guidance 3 Managed security without building an internal SOC 7
Assessor costs Assessor review included in paid plans 5 Not an assessor service 7
Target customer Teams that need reviewed compliance outcomes 3 Lean IT teams and MSPs that need managed detection 7

Key differences explained

Different job

Huntress monitors endpoints, identities, and logs, and investigates threats. Constant records Essential Eight maturity, keeps evidence with the control, and has a certified assessor review the result. A customer can run Huntress and still need a place to assess and report maturity.

What the logs can prove

Huntress says Managed SIEM can show whether controls are performing and can retain logs for audits. That is source evidence. It does not state that the platform decides a maturity level or includes an Essential Eight assessor.

Australian operation

Huntress publishes a Columbia, Maryland address. Australian ownership, an Australian office, Australian data residency, and Australian support hours were not stated on the pages reviewed. Constant publishes those as part of the platform.

Which approach may fit?

Neither approach is presented as universally better. They are designed around different priorities.

Constant may suit organisations looking for

  • Essential Eight maturity assessment with evidence linked to each strategy
  • Certified assessor review included in the workflow
  • Australian ownership, operations, data, and support
  • A record that can sit above the security tools already in use

Huntress may suit organisations looking for

  • Managed endpoint, identity, and log detection
  • A 24/7 security operations centre without hiring one
  • Log retention that can support audits and investigations
  • Security monitoring for lean teams and MSPs

Methodology and sources

How we compared the platforms

This comparison uses publicly available product documentation, vendor websites, security information, and published pricing paths reviewed on 23 September 2026. Where a capability could not be verified, it is marked “Not publicly stated” rather than treated as unavailable.

  1. 1 Constant: Essential Eight compliance software
  2. 2 Constant: Essential Eight with assessor review
  3. 3 Constant: Platform workflow and features
  4. 4 Constant: Security and Australian operations
  5. 5 Constant: Public pricing planner
  6. 6 Constant: ASD Essentials transition tracker
  7. 7 Huntress: Essential Eight practical guide
  8. 8 Huntress: Contact and US address

Questions answered

What is the difference between Constant and Huntress?

Huntress detects threats and retains security events that can support Essential Eight controls. Constant sits above operational tools to assess maturity, link evidence to requirements, manage gaps, and produce a reviewed assurance outcome. The products can be used together.

Do Constant and Huntress support Essential Eight?

Constant supports Essential Eight maturity assessment with evidence, AI pre-review, and certified assessor review. Huntress: SIEM and detection can support alignment; not an E8 assessment platform.

Does Huntress include certified Essential Eight assessor review?

Huntress: Not an assessor service. Constant includes certified assessor review in its paid-plan workflow.

Can Constant automatically collect Essential Eight evidence?

Yes. Constant collects evidence automatically where a supported integration is connected. Teams can upload evidence where a connector is not used. AI pre-reviews either source before a certified assessor reviews the result.

Where does Constant store Australian customer data?

Constant publishes Australian data residency and says the platform is designed, owned, and operated in Australia by Steltek Pty Ltd.

Does Constant support ASD Essentials?

ASD Essentials is included in the price with Essential 8. Constant continues to assess Essential Eight until ASD publishes requirements that can be implemented and assessed, and the transition tracker is updated as official information is released.

Is Constant a GRC platform?

Constant supports compliance and risk workflows, but its published focus is continuous evidence and reviewed compliance outcomes. It combines framework guidance, evidence, remediation, AI pre-review, certified assessor review, and reporting in one workflow.

How does Constant use AI differently from Huntress?

Constant uses AI to pre-review compliance evidence before a certified assessor reviews the result. Huntress describes an AI-centric security operations centre that investigates endpoint, identity, and log alerts.

Start your compliance journey today

Choose the right plan for your organisation. Scale seamlessly as your compliance needs evolve.

Ready to simplify your compliance process?

Book a demo and see constant in action.

All Paid Plans Include

  • Unlimited human assessor reviews

  • Evidence collection

  • AI-assisted pre-reviews

  • Compliance dashboards

  • Australian business-hours support

  • On-demand reporting

  • Control owners and tasks

  • Evidence uploads

  • Maturity and gap tracking

  • Role-based access controls

  • Framework guidance

  • 5×5 Risk Matrix

  • Australian data residency