Digital Forensics & Investigations
Understand what happened
Evidence, a plain-language explanation of potential business impact, and prioritised next steps within an agreed scope.
Examine available evidence to establish what can be confirmed, what may be affected, and what needs further investigation.
What's included
How it works
Scope
You tell us what looks wrong. We define what data and systems we need to examine and preserve evidence immediately.
Investigate
We analyse logs, correlate events, and reconstruct exactly what happened, when, and how far it went.
Report
You receive a clear written report: what happened, business impact, and prioritised next steps - readable by both your board and your engineers.
What you get
Deliverables, coverage, access, fees, and response or reporting times are agreed in your proposal. Testing requires written authorisation. Findings reflect the agreed scope and available evidence; they are not a guarantee against a breach.