Incident response
Rapid triage, scope review, evidence preservation guidance and prioritisation of affected systems.
Ransomware recovery.
Incident response, decryption assessment and data recovery for businesses facing an active ransomware event.
TY Shao ยท +65 9859 7322
WhatsApp messages only; voice calls are not monitored. Messages are reviewed as soon as operating coverage is available. This is not a 24/7 response guarantee.
Pay after decryption.
The decryption service is charged separately from all subscriptions. Payment for decryption is due after successful decryption. Recovery feasibility depends on the ransomware variant, affected systems, available evidence and data condition.
One-time incident service No subscription required Feasibility assessed first No universal recovery guarantee
What the response can include.
Decryption assessment
Identify the ransomware family, review samples and determine whether a responsible recovery route may exist.
Data recovery
Validate available backups, recover accessible data and verify integrity before business reuse.
Post-recovery review
Review likely entry points, accounts, endpoints and controls that need immediate strengthening.
Before you contact us.
Disconnect affected systems from the network if it is safe to do so. Avoid deleting evidence, reinstalling systems or paying a ransom before specialist assessment.
Prepare what you can
- A photo or copy of the ransom note
- Examples of encrypted files and file extensions
- Affected systems and the time the issue was first observed
- Available backup information
- A secure contact who can coordinate the response