Something has happened.
We are ready.
Rapid. Structured. Defensible. Our Australian-based specialists deliver forensic incident response. We perform all analysis in Australia. Retainer clients get priority response. Without a retainer, we triage within 4 business hours: if we can take your matter, we assign an investigator; if we cannot, we help you find a firm that can. More than 190 matters since 2018 · 4-business-hour triage · All analysis performed in Australia
Active breach or incident?
Call now. We triage every call within 4 business hours. Retainer clients have priority response.
1300 123 099Emergency or not
Call either way. The timing differs.
Most of what reaches us is not a live emergency. That matters because evidence collection is always urgent, but formal analysis usually is not. Call us and we will tell you what kind of situation you are in.
Emergency now
Active breach in progress. Exfiltration happening. Ransomware encrypting. Credentials actively misused. Call immediately. Minutes matter. We triage within 4 business hours and retainer clients have priority.
Something has happened, but it is not live
Departing employee took files. Suspected intrusion from last week. Data you thought was secure appears online. Suspected insider. Still call immediately. Evidence preservation is urgent. But formal evidence collection is typically scheduled within one to three days, and full analysis runs days to weeks depending on scope. Call first so we can lock the evidence before it degrades.
What to expect
When you call
We listen and assess
Tell us what happened. We ask the right questions and give you a straight assessment. No obligation.
We scope and quote
You get a fixed-price scope before any work begins. No hourly surprises.
We investigate
We apply forensic methodology from the start. We preserve evidence, stress-test findings, and maintain chain of custody throughout.
How we respond
Services
Departing employee forensic scan
Forensic image and indicator scan of laptops, email, and cloud storage. USB transfers, cloud uploads, email forwards, deleted files.
Breach classification
Classify exactly which personal information was exposed. All analysis performed onshore. You know precisely what to report.
Insider threat review (IRIS)
AI-assisted email review with our IRIS Challenge methodology. We challenge every finding through adversarial review before it reaches you.
Incident investigation
Targeted or full-scope incident investigation. Containment, removal, recovery, and detailed reporting.
Expert witness testimony
Digital forensic expert evidence accepted in federal and state courts. Reports prepared to withstand cross-examination.
eDiscovery
Electronic discovery, data collection, and review. Court-compliant evidence handling with documented chain of custody.
Want capacity guaranteed when it matters?
Retainer clients have priority access and a named investigator. Coverage depends on which retainer shape you choose. See protection options for the full structure.
See protection optionsCall now
We triage every call within 4 business hours. Retainer clients get priority: NDF Protection Program clients receive emergency incident response after 6 months on the plan, and DF retainer clients have priority forensic access. If we cannot take your matter, we point you to a firm that can.
Monday to Friday, 8 am to 6 pm AEST. Out-of-hours voicemails monitored. Not on a retainer yet? See protection options.