Emergency help

Incident Response

If you've been hacked, hit by ransomware or tricked into a fraudulent payment, we help you contain it, find out what happened and get back to work. You don't need to be a client to contact us.

What to do right now
01

Disconnect, don't switch off

Unplug affected computers from the network or turn off Wi-Fi, but leave them running. Memory can hold evidence.

02

Don't pay or reply

Don't pay a ransom and don't contact the attacker before you have talked to us.

03

Don't delete anything

Keep emails, files and logs as they are, even if they look suspicious.

04

Contact us

Message us on WhatsApp and we'll take you through the next steps.

Open WhatsApp
Sound familiar?

If any of this rings a bell, we can help

Your files are encrypted and there is a ransom note on the screen.

A customer received an invoice from your email address that you never sent.

A payment went to a "new" bank account that turned out to be fake.

Your systems are behaving strangely and you can't tell whether it's an attack.

What's included

What our incident response covers

01

Immediate triage

We assess the situation with you straight away and tell you what to do, and what not to do.

02

Containment

We isolate affected machines and accounts to stop the attack from spreading.

03

Investigation

We find out how the attacker got in, what they touched and whether any data left the business.

04

Recovery

We clean or rebuild affected systems and safely restore your data from backups.

05

Reporting and notifications

Clear documentation for GDPR breach notifications, your insurer and, where needed, the authorities.

06

Lessons learned

A review of what went wrong and what to change so that it does not happen again.

What you get

The result

When everything feels urgent, you need someone who has seen it before and knows the order to do things in.

  • Experienced help from the first message
  • The attack contained and the attacker locked out
  • A clear account of what happened and why
  • Systems restored and safe to use again
  • Evidence preserved for insurers and authorities
  • A practical plan to stop it happening again
Ways to work with us

Pick what suits you

You get the scope and cost in writing before any work begins.

01

One-off assessment

A single test or review with a written report, a good first step if you are not sure where you stand.

02

Project

A defined piece of work, such as fixing findings, a cloud migration or a compliance programme, with an agreed scope and cost.

03

Ongoing service

Monitoring, hosting and security support on a monthly basis, so everything stays looked after.

04

Emergency response

Immediate help when something has gone wrong, whether or not you are already a client.

Questions

Incident Response: common questions

Yes. Message us on WhatsApp and we will help, whether or not we already work together.

Other services