While you wait for us
- Don't turn off affected computers. Unplug their network cable or turn off their Wi-Fi instead. Leaving them on preserves evidence.
- Don't delete anything or contact the attacker. Don't pay any ransom.
- Use a phone or an unaffected device to reach us. Assume your email may be read by the attacker.
- If money was sent, call your bank's fraud department now and ask for a recall. Speed matters most here.
- If you have cyber insurance, call your insurer's breach hotline. Many policies require it before you hire outside help.
What happens when you call
- First call. We listen, tell you what to do immediately, confirm our rate, and get your go-ahead in writing (a text or email is enough).
- Contain. We cut off the attacker: isolate affected computers, lock compromised accounts, and end their sessions.
- Clean up. We remove what the attacker left behind and find out how they got in.
- Recover. We help restore systems from clean backups and close the gap they used.
- Written summary. You get a plain-language report of what happened, what we did, and what to fix next, useful for your insurer and your records.
Incidents we handle
Working with your insurer and law enforcement
Your insurer
If your cyber insurance assigns an incident response firm, we work with them as your local team. We already know your systems and can be on site in Austin and Central Texas.
Law enforcement
We help you report the incident to the FBI's Internet Crime Complaint Center (IC3), which can help recover wired funds when reported quickly.
Rates
Clients on a protection plan
$225 per hour
Priority response, included handling of small incidents on protected devices*, and a reduced hourly rate of $225 for larger ones.
Not yet a client
$350 per hour, 4-hour minimum
Emergency response at $350 per hour, 4-hour minimum. We confirm the rate before any work starts.
* A small incident: the first hour of follow-up on a confirmed detection on one protected device or account is included. Time beyond that, incidents that reach a second device or account, and any recovery or rebuild are billed at the client rate. Client rates apply to incidents that begin after onboarding; an incident already under way when you sign up is billed at the emergency rate.
Get set up before you need it
For businesses that are not on a protection plan (the Protect + Harden + Respond plan has it built in). A prepaid retainer gets you a guaranteed response time and a lower rate. We do the setup in advance, so on the worst day we already have the access and contacts we need.
- 10 prepaid hours per year at $225 per hour
- We start work within 4 hours, any day
- Onboarding: emergency contacts, access, and a one-page incident plan
- Unused hours convert to hardening or assessment credit at renewal; they don't carry over