Ransomware
Isolate affected systems, stop the spread and restore from clean backups.
Incident Response & Forensics
Contain the Attack, Recover Fast, Report on Time
Incident response and digital forensics that contain attacks, restore operations and meet regulator reporting deadlines, with evidence that holds up.
What We Handle
Incidents We Respond To
Business Email Compromise
Lock down accounts, trace fraudulent payments and remove attacker access.
Insider Threats
Investigate misuse of access discreetly and preserve evidence for HR or legal.
Data Breaches
Establish what data was exposed, to whom, and who you must notify.
Malware Analysis & Threat Hunting
Analyse malicious code and hunt for persistence the attacker left behind.
Digital Forensics & e-Discovery
Forensically sound evidence collection for legal cases and insurance claims.
How We Respond
A Structured Response, Start to Finish
TriageScope the incident and agree immediate priorities
ContainStop the spread and cut off attacker access
EradicateRemove malware, backdoors and compromised accounts
RecoverRestore systems safely and confirm they are clean
ReportRoot cause, timeline and lessons learned
Regulator Reporting
Meet Every Notification Deadline
In India, CERT-In expects many cyber incidents to be reported within 6 hours of being noticed. We prepare and file the notifications so your team can focus on recovery.
- CERT-In incident reporting
- DPDP Act and GDPR data protection authorities
- Sector regulators: RBI, SEBI and IRDAI
Engagement Models
Ready Before You Need Us
Incident Response Retainer
Agreed terms, onboarding and response playbooks in place before an incident happens.
On-Demand Response
Call us during an active incident and we engage straight away.
Managed Detection
Spot incidents early with 24/7 monitoring. See GRC & Compliance
FAQ
Frequently Asked Questions
What should we do first if we suspect a cyber incident?
Do not switch off or wipe affected systems, because that destroys evidence. Disconnect them from the network if you can, keep logs, avoid using possibly compromised email accounts to discuss the incident, and contact an incident response team straight away.
What is the CERT-In 6-hour reporting rule?
CERT-In directions issued in April 2022 require many types of cyber incident in India to be reported to CERT-In within 6 hours of being noticed. We prepare and file that report alongside any data protection or sector regulator notifications.
What is an incident response retainer?
A retainer agrees terms, contacts and response playbooks before an incident happens. When something goes wrong, there is no contract to negotiate and the team already knows your environment.
Can your forensic findings support legal cases or insurance claims?
Yes. We collect evidence with a documented chain of custody and report findings in a form that legal counsel, insurers and regulators can rely on.