Incident response

Something happened? Start with containment and evidence.

Choose the situation that is closest to yours. The first priority is to reduce further harm, preserve useful evidence, and involve the right provider or professional.

Get the response plan

Someone clicked phishing

Secure the account, report the message, and check what was accessed.

Open resource

Ransomware may be involved

Separate affected systems, preserve evidence, and get specialist help.

Open resource

My website was hacked

Preserve the visible evidence and secure hosting, registrar, and email access.

Open resource

Business email compromise

Protect accounts and payment workflows before investigating the full impact.

Open resource

Stolen credentials

Secure exposed accounts, revoke sessions, and check reuse.

Open resource

Possible data breach

Contain access, preserve evidence, and review notification obligations.

Open resource

Business impersonation

Protect trusted channels and report fake domains, profiles, or payment requests.

Open resource