ThreatHunter.ai Announces Free 90-Day MILBERT.ai Access for Qualified Firms | Weekly Voice
Brea, Calif. — In response to a surge of Adversary-in-the-Middle (AiTM) intrusions that slip past multi-factor authentication (MFA), ThreatHunter.ai is opening its real-time authentication monitoring platform, MILBERT.ai, to qualified organizations for a 90-day, no-commitment trial. The Service-Disabled Veteran-Owned Small Business, active in 24/7 threat hunting since 2007, says the offer is designed to give security teams immediate visibility into session hijacking and token theft that standard MFA controls fail to catch.
Why this matters: MFA is not a silver bullet
Attackers are increasingly using AiTM toolkits—such as Evilginx—to intercept credentials and session tokens during login flows. The user experience looks normal, and MFA challenges can be completed successfully. Yet the attacker, having stolen the session token in real time, can authenticate as the victim without triggering another MFA prompt. The result: organizations that believe they are protected by MFA are still experiencing account takeovers and downstream compromises.
“We’re watching company after company get breached through AiTM while leadership is told that MFA has them covered,” said James McMurry, CEO and founder of ThreatHunter.ai. “MFA isn’t the finish line—it’s a speed bump for attackers using modern kits. MILBERT is built to spot compromised sessions and credential abuse in real time with effectively zero false positives.”
What MILBERT.ai does
MILBERT.ai ingests and analyzes authentication events across the enterprise in real time, correlating login patterns, session behavior, and credential usage to flag live account compromise, token theft, and AiTM activity. According to the company, the platform currently processes an average of 6,380 authentication events per second per customer and is tuned to deliver near-zero false positives—so alerts are both actionable and timely. When a threat is identified, MILBERT can take immediate response actions to disrupt the adversary before damage escalates.
Unlike traditional monitoring that generates alert fatigue without clear next steps, the platform focuses on confirming compromise rather than speculative anomalies. The intent is to help security operations centers move from chasing noisy signals to decisively containing verified intrusions.
Offer details: 90 days, no commitment
ThreatHunter.ai says qualified organizations can deploy the full version of MILBERT.ai for 90 days without any sales-gated features, upfront commitment, or obligation to continue afterward. The company positions the move as an intervention amid a wave of session hijacking attacks that often go undetected until post-incident forensics.
“For years, the industry sold MFA as a cure-all while adversaries built tools that walk right through it,” added Eric Cowperthwaite, COO of ThreatHunter.ai. “Most teams still lack visibility into whether an authenticated session is legitimate or hijacked. MILBERT changes that. The 90-day access is about helping defenders see—and stop—what’s really happening.”
How AiTM attacks bypass MFA—at a glance
- AiTM kits sit between the user and the identity provider during login.
- Credentials and MFA challenges complete normally from the user’s perspective.
- The attacker captures session tokens in real time, enabling them to access accounts without re-prompting MFA.
- Without session integrity monitoring, hijacked sessions can persist and spread laterally.
Defenders increasingly recognize that MFA must be paired with continuous session risk assessment, device and network trust signals, and rapid response capabilities to shut down suspicious sessions the moment they’re detected.
Who should consider MILBERT.ai
- Enterprises seeing a rise in consent phishing, MFA fatigue, or suspicious MFA approvals.
- Organizations with distributed or remote workforces relying heavily on cloud identity providers.
- Security teams burdened by high alert volumes and looking for validated, low-noise detections of account compromise.
- Regulated industries where account takeover can trigger material risk or compliance exposure.
ThreatHunter.ai at a glance
Headquartered in Brea, California, ThreatHunter.ai is a Service-Disabled Veteran-Owned Small Business offering 24/7 threat hunting. Beyond MILBERT.ai (real-time authentication monitoring), its portfolio includes:
- ARGOS — Managed Detection and Response (MDR)
- GEIGER — Attack path analysis
- TACT-IO — Vulnerability scanning
- VIZIUM — Network traffic analysis
Getting started
Interested, qualified firms can enroll for the 90-day MILBERT.ai access directly with ThreatHunter.ai. The company indicates there are no feature gates during the trial, no required sales calls to initiate, and no obligation at the end of the period.
Media contact: Greg Nance — 714-515-4011 — 408859@email4pr.com
Original announcement: PR Newswire
