Incident AI response

Under attack? Contain it in the first hour.

A named responder, AI-assisted investigation, and a fix for the exact gap the attacker used. If money has just left your account, call your bank's fraud line first — then contact us.

Report an incidentAnalyze evidence in the console
0–60 min

Contain

  • · Recall or freeze fraudulent payments with your bank
  • · Revoke compromised sessions, tokens and mailbox rules
  • · Disable exposed AI agent tools and API keys
Hours 1–24

Investigate

  • · Reconstruct the attack timeline from mail, call and log evidence
  • · Identify the entry point, the lever used and every affected account
  • · Preserve evidence for insurers, regulators and police
Days 1–5

Fix

  • · Close the exact gap exploited — process, control or model
  • · Deploy detections for the same pattern across your estate
  • · Written report with root cause and owner per action

Incidents we handle

Deepfake executive fraud

Cloned voice or video used to authorise a payment or data release.

AI-written BEC & invoice fraud

Supplier impersonation that redirects payments to attacker accounts.

Prompt injection & AI data leaks

Chatbots or agents manipulated into revealing data or taking actions.

Account takeover via AI phishing

Credential or MFA-fatigue phishing crafted per target by an LLM.

Retainer option

Pre-agreed contacts, playbooks tested against your systems, and guaranteed response times — so the first hour is spent containing, not contracting.

Discuss a retainer →