Incident response and recovery plan
An incident happens and nobody knows what to do first.
We respond remotely within 15 min, on site in Paris within 4 h. Then we write the recovery plan with you.
The problem
- 80 % of French small businesses say they lack preparation (Cybermalveillance 2025).
- Backups encrypted together with the servers.
- No written restart order.
What you check at acceptance
- Incident contained, cause found, report handed over.
- Written recovery plan: restart order, contacts, access.
- Recovery drill done with you.
Each point is checked with you on delivery day.
Included
- Isolation, analysis, restoration.
- Logging and monitoring in place after the incident.
- Recovery plan and drill.
What sets us apart
- Written response times: 15 min remote, 4 h in Paris, 6 h elsewhere in France.
- One day rate, known in advance.
- What we find is handed to you in writing.
Proof
We run a Wazuh SIEM, uptime probes and alerting.
We built an encrypted rescue key to repair servers without installing anything.
Security audit: 3 of our 14 client companies.
Questions
What should I do right now?
Unplug the affected computer from the network without turning it off, pay no ransom, then call us.
Ready to start?
Describe your context. You get a price and a date.