Cluebyte Start a project

A tested plan for
the day something goes wrong

A written response plan, on-call responders and tested restores, so an incident costs you hours rather than weeks.

Typical
Retainer
Pricing
Fixed fee or monthly retainer
Group
Cyber security

What we do

Incident response and recovery

A tested plan, on-call responders and secure restores that keep downtime and losses small.

01

Response plan

Who does what, who decides and who to call, written down.

02

Tabletop exercises

Your team practises a realistic incident before it happens.

03

Backups and restores

Backups checked by actually restoring them.

04

On-call responders

Experienced help when an incident starts, under a retainer.

Where it fits

Good places
to start

  1. 01
    No written plan

    Teams that would be improvising on the day.

  2. 02
    Ransomware worries

    Making sure you can restore without paying.

  3. 03
    Insurance requirements

    Evidence of a tested response capability.

How it runs

Small steps,
shown every week

RunbooksEDRSIEMBackup testingForensicsTabletop exercises
  1. Week 1
    Assess

    We agree the scope and look at what you have, with your team's help.

  2. Weeks 2–4
    Fix

    Findings ranked by real risk, fixed with you or for you.

  3. Ongoing
    Watch

    Monitoring and regular checks so new gaps are caught early.

  4. Quarterly
    Report

    A short, readable summary for your leadership or board.

Questions

Before you start

How fast do you respond?
Response times are set in the retainer, typically within an hour for critical incidents.
Can you help if we're already under attack?
Yes. Contact us straight away and we'll help contain it, retainer or not.
Can you work with our IT provider?
Yes. We often work alongside an existing IT team or provider, and agree who does what at the start.

Incident response and recovery

Tell us what
you need.

A 30-minute call with the people who would do the work, then a written proposal.