Incident response team available 24/7
Cybersecurity and digital forensics, from prevention to evidence.
We protect organisations from cyber attack, respond when incidents happen, and investigate digital crime to a forensic standard. Independent, UK-registered and available around the clock.
- Companies House16044389
- ICO registrationZC096094
- Registered officeLondon, United Kingdom
Selected outcomes from recent engagements
View all case studies72 hours
Production systems restored after a LockBit ransomware attack, with no ransom paid.
Manufacturing
6 hours
To contain a patient-data breach, with regulators satisfied and no fines imposed.
Healthcare
23 findings
Vulnerabilities fixed before a bank's mobile platform launched, including 4 critical.
Financial services
What we do
Three practice areas covering the full life of a security incident: preventing it, responding to it, and investigating it afterwards.
Security services
Find and fix weaknesses before attackers do, and keep watch once you're secure.
- Penetration testing
- Managed security and 24/7 monitoring
- Compliance: ISO 27001, GDPR, PCI-DSS
- Cloud, email and network security
Incident response
When an attack is under way, we contain it, restore operations and preserve the evidence.
- Breach response and containment
- Ransomware response and recovery
- Business email compromise
- Regulatory and insurer support
Forensics and investigation
Independent investigation of digital crime, with reports that stand up to scrutiny.
- Digital forensics
- Blockchain and digital asset tracing
- Financial fraud investigation
- Corporate and insider investigations
Who we work with
Organisations
From SMEs to enterprises in regulated sectors, including finance, healthcare and professional services.
Legal and financial professionals
Solicitors, insurers and banks who need independent forensic analysis and expert technical reports.
Individuals
People affected by cybercrime, fraud or identity theft who need a confidential, professional investigation.
Sectors we've supported
Engagements drawn from our case studies.
How an engagement works
One disciplined process, whether we're testing your defences, responding to an attack or investigating a loss. You know what happens at every stage and what you receive.
-
Confidential consultation
We listen, assess how urgent the situation is and agree the scope of work, at no cost to you.
You receiveAn agreed scope and plan of action
-
Assessment and preservation
We review your systems or the available evidence, and secure anything time-sensitive before it can be lost.
You receiveSecured evidence and initial findings
-
Investigation or delivery
Our specialists carry out the testing, response or investigation, and keep you informed throughout.
You receiveRegular progress updates
-
Report and next steps
A clear technical report with recommendations, written for your board, insurer, regulator or legal team.
You receiveForensic report and remediation plan
Active incident? We skip straight to containment. Steps 2 and 3 start the moment you call.
Call +44 7520 644325Why organisations choose Cyber Guard Core
Independent and confidential
We're honest about what we can and cannot do, and every engagement is handled under strict confidentiality.
Evidence you can rely on
Forensically sound methods and a documented chain of custody, so our findings hold up with insurers, regulators and courts.
Available when it matters
Security incidents don't wait. Our response team is on call 24/7, with constant communication throughout.
One team, from prevention to evidence
Security, incident response and forensics under one roof, so nothing is lost between handovers when it matters most.
Always current
The threat landscape changes constantly. We invest in training and research so our methods keep pace with attackers.
Experienced specialists
Our team includes certified incident handlers and digital forensic examiners, with backgrounds in forensics laboratories, law enforcement and enterprise security. Credentials are available to clients on request.
- Companies House16044389Verify the registration
- ICO registrationZC096094Verify on the ICO register
- Information securityManaged in line with ISO 27001 best practice
- Registered office124 City Road, London EC1V 2NX
Latest insights
All insightsFrequently asked questions
Can't find your answer? Talk to a specialist.
Yes. The initial consultation is free and confidential. We use it to understand your situation, explain how we can help and agree the scope before any work begins.
Our incident response team is available 24 hours a day, 7 days a week. Call +44 7520 644325 or message us on WhatsApp or Telegram and we will start triage straight away.
Yes. We work with SMEs, large enterprises and regulated organisations, as well as solicitors, insurers and banks who need independent forensic support, and individuals affected by cybercrime.
No, and you should be wary of anyone who does. Recovery depends on factors outside our control, including the cooperation of financial institutions, jurisdiction, timing and whether funds remain traceable. We provide the technical investigation and evidence that give recovery the best chance.
No. We are not a law firm and are not regulated by the SRA. Our work is technical: cybersecurity consulting, digital forensics and investigation. Our reports are designed to be used by your solicitors and other authorised legal representatives.
Yes. Many investigations cross borders, and we have coordinated with law enforcement and financial institutions in multiple jurisdictions.
Dealing with an incident right now?
Our incident response team is available 24/7. Call, message us on Telegram, or book a consultation for anything less urgent.