Incident triage & defensive guidance
Structured first steps when a website or online service may be compromised.
Scope and proposal agreed individually. No promised outcome before the initial review.
AT A GLANCE
Who it is for
- Small organisations responding to a website incident
- Hosting and website administrators
- Owners needing an initial technical assessment
Initial review → agreed scope → authorised work → documented outcomes

THE SERVICE
What this addresses
The initial response matters. I can help collect context, preserve technical evidence and identify appropriate containment and recovery actions within the agreed scope.
DELIVERABLES
What is included
The final scope is tailored to your environment and agreed requirements.
Initial symptom and timeline review
Evidence preservation and log collection checklist
Containment options and incident escalation advice
Recommendations for recovery, monitoring and follow-up investigation
OUR APPROACH
How we work together
01
Record what happened and determine access/authority
02
Identify time-sensitive evidence and business impact
03
Plan containment with the system owner
04
Document next steps and specialist escalation where necessary
NEXT STEP
Let’s discuss your project
Describe the system and the outcome you need. I will reply with questions and practical next steps.
Not a 24/7 emergency response retainer. Complex forensics, regulated disclosures and legal matters may require qualified external specialists.
