Emergency incident response — 1-hour SLA

Ransomware or breach suspected? Call now. Our responders preserve evidence, contain the threat, and guide safe recovery.

Hotline: +61 2 7205 9364

Our response methodology

  1. Identify: Confirm indicators, scope affected systems, and prioritize actions.
  2. Contain: Isolate hosts, accounts, and networks to stop spread.
  3. Eradicate: Remove malware, backdoors, and persistence artifacts.
  4. Recover: Restore operations safely and validate controls.
  5. Review: Post-incident reporting and hardening roadmap.

Forensics capability

We collect volatile and at-rest evidence, analyze timelines, and document root cause. Our collections respect chain-of-custody standards.

Ransomware response

Containment-first approach with safe restore and negotiation guidance if required. Our goal: minimize business impact and prevent reinfection.

Retainers and readiness

  • IR Retainers: Guaranteed response times and pre-approved actions.
  • Tabletop exercises: Train executives and responders on realistic scenarios.
  • Playbook development: Clear roles, steps, and decision points.
  • Readiness assessments: Validate backups, logging, and access controls.
  • Insurance coordination: We align with panel requirements and documentation.

What we cover

  • Business email compromise and account takeover
  • Ransomware and destructive malware
  • Insider threats and privilege abuse
  • Cloud account compromise and key leakage
  • Data exfiltration and web application breaches

Evidence preservation

We guide you to pause non-essential activity, snapshot critical systems, and avoid wiping data until evidence is secured.

Communication templates

Clear, role-based communications for executives, staff, customers, and regulators to ensure consistent messaging under pressure.

Stories of recovery

“MildFire stopped a fast-moving ransomware event before encryption spread. We were back in production the next day.”

Oliver Wright — GM Technology, ManuPro (Sydney)

“Their forensic report and evidence pack satisfied our insurer and helped us strengthen controls quickly.”

Emily Zhao — CFO, BrightHealth (Adelaide)

Report an incident now

Call: +61 2 7205 9364
Email: [email protected] (Subject: URGENT INCIDENT)

Availability: 24/7 for active incidents. Office hours for non-critical inquiries as listed below.

Hours Mon-Fri: 8:30-17:30 AEST, Sat: 10:00-14:00, Sun: Closed