Active incident? First reflexes

Living through a breach or a ransomware attack right now? Do this before anything else:

Don't shut anything down

Don't close anything, don't restart, don't cut the power. Recovery keys and evidence live in volatile memory: powering off a machine can destroy them for good.

Disconnect the network

Unplug the network cable or turn off Wi-Fi on every affected machine, without shutting it down. You stop the spread and keep the evidence.

Document everything

Note the time, the messages on screen, what changed. Photos of screens are gold for forensics.

Call us

Every minute counts. We walk you through it step by step, and we travel if the situation calls for it.

Fastest: text us. We watch our messages around the clock.

Book a consultation

The first conversation is always free. No obligation, no sales pitch. We listen, we assess, and we tell you honestly whether we can help.

Book a Free Consult Dilbert : une prérencontre pour préparer la rencontre de demain

For everyone asking for a pre-meeting before the meeting. (Dilbert © Scott Adams / Andrews McMeel)

By email

[email protected]

Response time

We usually reply within one business day. For incidents, response is immediate during business hours.

Confidentiality

Everything is treated as confidential from the first contact. A mutual NDA is signed before any access to your systems or data.