Incident response
Under attack? Call now. Do not wait for email.
Containment, forensics and the written account your regulator, board and insurer will ask for.
Retainer and on-demand response. If you are not a client, call anyway.
0–15 minutes
Contain, do not investigate
Isolate affected systems, preserve logs, stop the bleeding. Do not wipe machines.
15–60 minutes
Call the line
Speak to an incident responder. We scope the entry point and the blast radius.
First 24 hours
Evidence and notification
Forensic timeline, regulatory notification obligations, and a board-ready summary.
After
Quantify and recover
Loss quantification in Fortress for insurance and board reporting, then remediation.
If you cannot call yet
Send what you know. We will call you back.
Do not include credentials, customer data or anything you would not put in an email. A short description of the symptom is enough.
Emergency line · 24×7