Under attack? Call us now.
If you are facing ransomware, a data breach or any active threat, speak to our team straight away. The first hours decide how much damage an incident does.
Alternative line: +254 715 333 545. If we can't pick up straight away, WhatsApp either line or use the form and we will call you back.
Five things to do right now
Isolate, don't wipe
Disconnect affected machines from the network, but leave them powered on. Shutting down or reinstalling destroys the evidence an investigation needs.
Preserve logs
Keep firewall, server, email and security tool logs. Pause any automatic log deletion or rotation.
Reset from a clean device
Change administrator and affected account passwords, and revoke sessions, using a device you trust is not compromised.
Don't engage the attacker
Do not reply to ransom notes or pay anything before taking advice. Keep the incident on a need-to-know basis.
Start a timeline
Write down what was noticed, when, by whom and what has been done since. It speeds up the investigation.
Not an emergency today?
The right detection and response platform, SIEM, XDR or network detection, spots the warning signs so the next incident is caught early.