ClearpointHow we investigate
A consistent process, every incident.
No guesswork. Every engagement follows the same four stages, documented as we go.
Detect
Identify the scope of the incident — what's affected, how it happened, and what's still active.
Contain
Isolate affected systems immediately to stop lateral movement and further data exposure.
Investigate
Forensic review of logs, endpoints, and access history to establish root cause and impact.
Remediate & report
Close the gap, harden the environment, and deliver a clear report of what happened and why.
Not sure where to start?
Tell us what's going on — a suspected breach, a network that needs fixing, or infrastructure you're planning to upgrade. We'll tell you plainly what we'd do first.
ACTIVE BREACH?
Call our incident line
Open 8am–8pm daily. Call as soon as you notice something's wrong.
On-site servicing hours: 8am–6pm daily