Incident response
Calm, structured response — starting from whatever you already know
You do not need to diagnose the incident before contacting us. You only need to describe what you noticed. Everything after that is a process.
- 01
Triage
We establish what is known, what is still uncertain, and how urgent the situation is. Preliminary severity is confirmed or corrected by an investigator.
- 02
Evidence preservation
Before anything is changed, we identify the logs, files and records an investigation will depend on and record how they were collected.
- 03
Investigation
We reconstruct what happened: initial access, activity, scope and whether data or accounts were affected.
- 04
Containment and remediation
Recommended actions are tracked with an owner and a status so nothing is assumed to be done.
- 05
Findings and reporting
You receive documented findings, indicators, actions taken and recommendations, with the limitations stated plainly.
Case states you can track
Every case moves through a defined set of states. You always see the current one.
Ready when you are.
Start Incident Assessment