Group-IB Incident Response Retainer
- Pre-agreed contract for IR to eliminate costly delays
- Access to a team of experts who know your business
- A wide range of security services for hours repurposing
17 years
of hands-on experience
60 000+
hours of incident response
360+
top-tier cybersecurity experts
Service Benefits
Incident Response Retainer is a pre-negotiated statement of work to provide a synergy of proactive and reactive services related to a security incident.
Group-IB designed Incident Response Retainer agreements in different ways to fit various budget and business needs, and to minimize downtime during a cyberattack.
92%
of companies are dissatisfied with their current response time to a data breach in 2020
Synergy of security services
A variety of technical & strategic services to build a proactive approach to incident response
Shortest response time
Signed SLAs to guarantee timely service and 24/7 emergency response
Discounted rate for extra hours
Flexible terms of the Retainer: discounted rate for additional consulting services
Repurposing unused hours
A variety of proactive, reactive and educational services for repurposing prepaid hours
Incident Response Retainer Levels
Lite
- Brief Description
Upfront costs, agreed terms, SLA for initial response
- Service duration
- 1 year
- Pre-paid hours
- Yes
- Access to 24/7 emergency response hotline
- Yes
- SLA: Initial remote response
- 7 hours
- SLA: Onsite response
- Best effort
- Incident Response Educational Workshop
- No
- Incident Response Readiness Assessment (Pre-IR)
- No
- Discounted rate for additional consulting hours
- No
- Repurpose unused pre-paid hours for other services
- No
Standart
- Brief Description
Upfront costs, SLA, 2‑days IR workshop
- Service duration
- 1 year
- Pre-paid hours
- Yes
- Access to 24/7 emergency response hotline
- Yes
- SLA: Initial remote response
- 5 hours
- SLA: Onsite response
- 48 hours
- Incident Response Educational Workshop
- Yes
- Incident Response Readiness Assessment (Pre-IR)
- No
- Discounted rate for additional consulting hours
- Yes
- Repurpose unused pre-paid hours for other services
- Yes
Premium
- Brief Description
Upfront costs, SLA, repurpose of unused hours, Pre-IR
- Service duration
- 1 year
- Pre-paid hours
- Yes
- Access to 24/7 emergency response hotline
- Yes
- SLA: Initial remote response
- 3 hours
- SLA: Onsite response
- 30 hours
- Incident Response Educational Workshop
- Yes
- Incident Response Readiness Assessment (Pre-IR)
- Yes
- Discounted rate for additional consulting hours
- Yes
- Repurpose unused pre-paid hours for other services
- Yes
| Feature | Lite | Standard | Premium |
|---|---|---|---|
| Brief Description | Upfront costs, agreed terms, SLA for initial response | Upfront costs, SLA, 2-days IR workshop | Upfront costs, SLA, repurpose of unused hours, Pre-IR |
| Service duration | 1 year | 1 year | 1 year |
| Pre-paid hours | Yes | Yes | Yes |
| Access to 24/7 emergency response hotline | Yes | Yes | Yes |
| SLA: Initial remote response | 7 hours | 5 hours | 3 hours |
| SLA: Onsite response | Best effort | 48 hours | 30 hours |
| Incident Response Educational Workshop | No | Yes | Yes |
| Incident Response Readiness Assessment (Pre‑IR) | No | No | Yes |
| Discounted rate for additional consulting hours | No | Yes | Yes |
| Repurpose unused pre-paid hours for other services | No | Yes | Yes |
Services for repurposing prepaid hours
Educational programs
- Incident Response
- Malware Analysis
- Digital Forensics
- Threat Hunting
Reactive services
- Digital Forensics
- Incident Investigation
- Electronic Discovery
Proactive services
- Penetration Testing
- Mobile / Web App Assessment
- Pre-IR Assessment
- Compromise Assessment
Gain peace of mind and reduce
attacker’s dwell time
attacker’s dwell time