Subject matter specialists on retainer, drawn against service credits: incident response, compromise assessment, red teaming and managed takedown.
Specialists on retainer
-
Raise
Your teamA service request naming what you need, at any hour.
-
Draw
From your balanceThe request draws the credits that service costs. The rate is agreed up front, in the table below.
-
Start
Our specialistsWe begin. No procurement cycle in the middle of an incident.
You need a compromise assessment twice a year and an incident responder once, with no warning. Hiring for that does not work, so we put our specialists on retainer instead.
Incident response service credit and usage
| Service | Description | Credits |
|---|---|---|
| Incident Response (IR) | Full NIST IR Lifecycle support (Containment, Eradication, Recovery) for active breaches including ransomware, unauthorized access, and data exfiltration | Min. 3 Credits Per SR ticket |
| Compromise Assessment (CA) | Investigation analyzing systems, logs, and artifacts for IOCs, active threats, or dormant malware | Min. 5 Credits Per SR ticket (5 man-days) |
| Penetration Testing (VAPT) | Authorized simulated cyberattacks to identify vulnerabilities and validate defensive capabilities | Min. 10 Credits Equivalent to 10 man-days effort |
| Vulnerability Assessment (VA) | Automated and manual identification of security vulnerabilities using scanning tools and testing methodologies | Min. 3 Credits Up to 50 hosts/IP addresses |
| Red Teaming (RT) | Goal-oriented adversary simulation testing detection and response capabilities across people, processes, and technology | Min. 3 Credits Per test case (varies by complexity) |
| Takedown Services (Managed Takedown) | Removal of malicious infrastructure including phishing sites, fraudulent domains, and C2 servers | 1 Credit Per site takedown |
| Malware Analysis (MA) | Static and dynamic analysis to understand malware functionality, behavior, and indicators of compromise | Min. 3 Credits Per SR ticket |
| Awareness Training (Security Training) | Security awareness training to educate employees on cyber threats, social engineering tactics, and secure behavior practices | Min. 3 Credits Per SR ticket |
| Phishing Assessment (Social Engineering) | Controlled simulations testing employee susceptibility to social engineering and identifying training needs | Min. 5 Credits Up to 500 employee emails |
| Security Remediation & Implementation (SRIS) | Hands-on technical assistance to implement security fixes, configure controls, and deploy recommended solutions | Min. 3 Credits Per SR ticket |
During an incident
We preserve evidence as we go, because you may need it for your regulator, your insurer or a court. You get a timeline of the intrusion and a root cause analysis once the incident closes.
If you are in an incident now
Call us before you rebuild anything. Rebuilding destroys the evidence that tells you how the attacker got in, and an attacker who still holds your credentials will walk back into the rebuilt system. Our contact details are on the contact page.