Reactive services

Negotiate smart, pay safe, recover fast.

"Negotiating with extortionists" probably isn't in your job description. Neither is paying them if you need to. And when your company is in the middle of a ransomware event, you need someone who does this full time.

With over 4500 successful threat actor engagements under our belt, our team of skilled negotiators armed with first-hand inside knowledge guide you through the crisis and back to business – and back to your actual jobs.

Get in touch

Your arsenal against cybercrime

Unscripted negotiations

Social engineers and expert negotiators work to take you from event to recovery. Our negotiations result in an average 77% reduction in ransom demands.

Compliant payments

From crypto wallet management to advanced sanctions risk screening, we ensure any payments are compliant and go to the right person at the right time.

Ready when you are

We can mobilize at a moment's notice to provide expert services during your ransomware event to get you back to recovery.

Advanced threat actor attribution

It's no secret that professional extortionists – especially ones on sanctions lists – try to lie about who they are. And if you end up making a non-compliant payment without doing your due diligence first, your payment could result in even bigger problems such as sanctions or compliance violations later.

Advanced threat actor attribution-sanction-list

Before making a payment, we harness our forward-deployed intelligence to perform advanced threat actor attribution. During this process we work to understand their identities, activities, associations, IOCs, TTPs, and more. This helps prevent you from making payments to sanctioned individuals or nation-state-sponsored actors hiding as ransomware affiliates.

Crypto Wallet Setup and Management

When you need to make a payment, we're ready to go. Our team has years of experience managing crypto wallets and payments, and holds crypto reserves to facilitate immediate payments to recover your stolen assets. Our team makes sure your payment goes to the right person at the right time.

Sanctions and Compliance Screens

We use our advanced threat actor attribution to ensure your payments don't result in sanctions violations. These screens include: The Office of Foreign Asset Control (OFAC), Global Affairs Canada, Security Council Consolidated List - United Nations, Consolidated List of Persons, Groups and Entities - EU, and more.

Open Dialogue with Authorities

We maintain open lines of communication with domestic and foreign law enforcement and intelligence agencies to provide you with the best guidance available. Some of these agencies include CISA, the FBI, the Secret Service, the UK National Crime Agency, the NSA, and others.

Proactive services

A Crisis is a Terrible Time to Plan for a Crisis.

If you're planning for an attack, you need to plan for a recovery. That means you need to know who you'll have on your side to engage threat actors, understand who the threat actors are, and, when necessary, provide compliant payments, all ready to deploy at a moment’s notice in a crisis.

As a proactive service, you get priority access to on-call negotiations experts and compliant payment services as well as crypto wallet management and incident response plan integration.

                                
                                Real
                                @Ransomware
                                :~$
                                Preparedness
                            
                                            Written Incident Response Plan
                                        
                                            Digital Forensics Capabilities
                                        
                                            Actionable Threat Intelligence
                                        
                                            Continuity and Disaster Recovery Plan
                                        
                                            Continuous Security Monitoring
                                        
                                            Regular Tabletop Exercises
                                        
                                            Retained Data Privacy Counsel
                                        
                                            Battle-tested Negotiation Team at the Ready
                                        
                                            Compliant Cryptocurrency Payment Partner