When it counts.
Good security reduces the odds of an incident; it never makes them zero. What separates a bad day from a catastrophe is how fast and how calmly you respond. We plan for that day in advance, so when it comes there's a runbook, not a panic.
Had a breach and you're not a client? You can still call us — 01158 244 824. We regularly help businesses remediate and investigate after an incident, so get in touch and we'll talk you through the options.
What a real response looks like.
Hour-zero containment
The first hour matters most. We isolate affected systems fast to stop an incident spreading while we work out what happened.
Documented runbooks
Pre-agreed playbooks for the likely scenarios, so the response is practised and calm rather than improvised under pressure.
Emergency line
A real number that reaches a real engineer when it matters. For clients, we begin triage within the hour.
Forensics & root cause
We work out how they got in and what they touched — so the fix addresses the cause, not just the symptom.
Recovery & rebuild
Clean restoration from tested backups, with compromised credentials and footholds removed before you go back online.
Post-incident report
A written account within 72 hours: what happened, what we did, and the specific changes that stop it recurring.
Included, not itemised.
You don't buy these one by one. It's all in the same managed package — here's more of what comes as standard.