Incident response

Someone got into your website or server. We clean it up and close the way in.

We find the harmful code and the hidden back doors, work out how they got in and what was taken, close the way in, bring your systems back, and write it all down for you.

If a password stopped working, money moved, or a message went out that nobody wrote, use the emergency page. Your request reaches the person on duty as soon as you send it.

A clock showing a short wait, beside a message that has been answered

A person here calls you back the same business day, usually within an hour.

  • Written permission first
  • A report in plain words
  • Checked again after the fix

What we do

Clean-up follows the same order every time, so nothing is missed.

  • Find the harmful code and the web shells, the hidden back doors left behind
  • Work out where they got in
  • Work out what was taken
  • Close the way in
  • Bring your systems back
  • Write a report of all of it

What you get in hand

Every finding is checked by a person before it reaches your report, and we fix what we find.

People check it, people fix it

  • Your website or server clean
  • The way in closed
  • Passwords and keys changed
  • A backup checked by actually restoring it
  • A report: how they got in, what was affected, and what we did

How the work goes

Five steps, in the same order every time.

Before any test, you sign a scope letter: what we test, on which dates, who to call, and what we must leave alone.

Your signature comes first

  1. Step 1

    We agree what to check

    A short call, or the form at the foot of this page. Together we decide which website, server or office systems we look at.

  2. Step 2

    You sign the scope letter

    It sets the targets, the dates, the contacts, and what we must leave alone. Work starts only once it is signed.

  3. Step 3

    We check, and write it down

    One report in plain words for you, with the technical detail attached for whoever looks after your systems.

  4. Step 4

    We fix it

    We make the repairs ourselves, or together with your current IT provider or web developer.

  5. Step 5

    We check again

    A second check confirms that each problem is closed.

What we need from you

  • What you noticed, and when you noticed it
  • Access to the affected website or server
  • One person who can make decisions while we work
  • Your signature on the scope letter before we touch anything

What it costs

Each job is a different size, so each one gets a fixed quote once the scope is agreed. You see the price in writing before any work starts.

Tell us what worries you.

Leave your name and a number. A person here calls you back the same business day, usually within an hour, and asks what you want checked. Would you rather start on your own? The free audit takes about three minutes.

  • Same day callback
  • Written permission first
  • Fixed quote

Ask us to call you back

Leave your name and number. A real person calls you back the same business day, usually within an hour.

We use your number to call you back about your request. Nothing else.

Call me back