Under attack right now? Active incident line — +1 480-999-0030 · Report an incident

Resources

The guides we'd hand you anyway.

Practical security guidance for law firms, SaaS platforms, financial firms, and regulated businesses, written from the engagements we run rather than recycled vendor content.

FIELD GUIDE

The first hour of a business email compromise

What to do, in order, and the well-intentioned mistakes that destroy evidence, alert the attacker, or forfeit the wire recall.

  • Containment without destroying the scene
  • What to preserve and what not to touch
  • Wire recall and IC3: the clock that matters most
  • Who to call, in what order
FIELD GUIDE

What client security questionnaires ask

Corporate clients vet law firms and SaaS platforms like any vendor now. The questions their security reviews ask, why, and how to prepare honest answers that win the work.

  • The five question clusters that decide the outcome
  • Why "MFA available" and "MFA enforced" read differently
  • When independent attestation pays for itself
  • Preparing without gaming it

Beyond the guides

When reading isn't enough, ask the people who wrote them.

Every guide here comes from engagements we've actually run. If your situation is the one described, the first conversation costs nothing.