Incident Response

We guide you safely through the incident response

Standards & Certifications

“We have noticed suspicious traffic on the firewall. This led to hypocritical websites with no comprehensible purpose. The websites’ certificates pointed to untrustworthy sources.”

"One of our employees fell victim to a phishing email. The downloaded file was allegedly mitigated by Endpoint Protection."

"A user clicked on a link to a phishing site and gave their credentials. This only became apparent when we registered this user from other countries/regions on our systems.”

“We have noticed abnormal behavior in our web server logs. Many requests from an IP to a specific resource appear in the logs, which should not be accessible from outside.”

"Our endpoint protection reports that a file has been quarantined. But the user worked as usual. It is not clear where this file came from."

"A ransomware message appears on all our screens (see photo attached)."

When it burns, Call the fire department.
If you get hacked call us.

Your emergency number for professional incident response:

+49 (0) 261 450 930 90

Important: If possible, please do not switch off any systems prematurely!
This could permanently destroy important information and warn the attackers.

Our mission: Limit damage without covering your tracks

Acute emergency? We'll walk you through
all incident response steps.

If you notice abnormalities in your network, your intuition might tell you to shut down all systems as a precaution. In doing so, however, you are blurring important tracks and making it more difficult to deal with the incident in a sustainable manner. With our help, you can prevent the attackers from spreading and at the same time secure evidence.

Do you want to prepare for an emergency? We will work out your emergency plan together

Has your company never been attacked by hackers? Then now is exactly the right time to develop a strategy for emergencies. Because the good news is: With the right preparation, nobody has to suffer major damage from malware or DDoS attacks.

Would you like to check whether your current emergency plan covers all the necessary steps?

In this article we provide the most important information about intrusion detection, mitigation, documentation and return to normal operations:

Why should you trust us in an emergency?

During an ongoing hacking incident, your business is particularly vulnerable. With an Incident Response Partner for professional support in this situation, trust plays an important role:

1. Does ProSec have the necessary expertise and experience to best help you?

Yes. Our incident response team consists of IT security consultants and certified penetration testers with many years of experience in this area.

2. Do you get quick, unbureaucratic help from us?

Yes. In an emergency, we will promptly send a Mobile Incident Response Team to you, which will take over the crisis management for you and coordinate the steps to be taken.

3. Do our IT security experts listen to you, take your concerns seriously and answer all questions in an understandable way?

Yes. We always adapt our services individually to the current situation and the available resources of our customers. We work on networks, but with people and share our knowledge as transparently as possible - such as in the article in our knowledge base linked above.

4. Is there "aftercare" to protect against future attacks?

Yes. With us you receive all services related to IT security from a single source:

Incident Response in an acute emergency
IT Forensic as a basis for security hardening
Threat Intelligence for a detailed review
Penetration Testing for building your cyber resilience

We can answer “yes” to all of these questions with a clear conscience.

Trust is good, control is better.

Your contact to us

Have you just been hacked, or do you want to prepare for such a situation?

Then find out everything you need to know about ProSec's Digital Forensic Incident Response (DFIR) services here.