RED GARRISON / INCIDENT ASSIST
A bad click.
A clear next step.
Clicked a suspicious link? Locked out of an account? Think someone has access they shouldn't?
Get help understanding what happened, securing what matters, and planning your recovery. Start with a defined assessment and know the cost before work begins.
Personal assessments from $199 · Business assessments from $750
01 / CHOOSE YOUR STARTING POINT
Expert help.
Clearly scoped.
Start with an assessment. If recovery work is needed, your assessment payment counts toward the total package price.
For individuals
Personal accounts, suspicious links, and a device you no longer trust.
START WITH AN ASSESSMENT
Clicked a Link
Assessment
Find out what your next step should be after a suspicious interaction.
- Review of what happened
- Available account and device evidence
- Immediate protective steps within scope
- Written findings and recommended next steps
WHEN MORE HELP IS NEEDED
Personal Account
& Device Recovery
Hands-on assistance to regain control and strengthen your account security.
Up to 3 total labor hours, including assessment
- Account recovery assistance
- Supported device security checks
- Session and unauthorized access cleanup
- Multi-factor authentication setup
- Recovery checklist and scheduled follow-up
$199 assessment paid? Your remaining balance is $400.
Discuss personal recoveryFor businesses
A compromised mailbox, suspicious employee activity, or a wider security incident.
ESTABLISH THE SCOPE
Business Incident
Assessment
Understand the initial impact and establish a practical response plan.
Up to 3 labor hours
- Initial scope and severity assessment
- Urgent containment where authorized
- Preservation of relevant available evidence
- Written findings and a priced response plan
CONTAIN, REMEDIATE, RECOVER
Business Containment
& Recovery
A tailored response engagement based on what the assessment reveals.
Initial package: up to 10 total labor hours
- Agreed containment and remediation
- Review of affected identities and devices
- Coordination with your IT team
- Incident summary and follow-up briefing
Your $750 assessment counts toward the engagement total.
Discuss business recoveryAll prices in USD. Recovery hours include the assessment. Labor allowances define the spending boundary; they do not guarantee resolution. We confirm suitability, scope, and pricing before you pay.
02 / HOW WE HELP
A clear process.
At every step.
Talk to us
A free 10-minute fit check helps us understand your situation and confirm we support the affected systems.
Agree & authorize
We confirm ownership or authority, define the work, and collect payment before the technical assessment.
Assess & act
We review available evidence, document findings, and take authorized protective action within scope.
Plan & recover
Receive written next steps. If more work is needed, approve the scope and price before we proceed.
03 / NO GUESSWORK
Know what's
included.
Clear boundaries help you make decisions when the situation is already stressful.
Additional work requires your approval.
Personal cases: $175/hour. Business cases: $250/hour. No work beyond the purchased allowance without prior approval.
Follow-up is part of recovery.
Recovery packages include one scheduled follow-up within seven days, within the total labor allowance. Additional remediation is billable.
Some incidents need specialist response.
Ransomware, widespread compromise, suspected sensitive-data theft, and formal forensic investigations require separate scoping or a specialist partner.
Recovery depends on the evidence and access available.
Account restoration may depend on the provider. We cannot guarantee recovered accounts, recovered money, or that no information was accessed.
04 / COMMON QUESTIONS
Before we begin.
I only clicked a link. Do I need the recovery package?
Not necessarily. The assessment is the first step. We review what happened and the available evidence, then explain whether further work is appropriate. Clicking a link alone does not establish that an account or device was compromised.
Do I pay for the assessment again if I upgrade?
No. Your assessment payment counts toward the same incident's recovery engagement. A $199 personal assessment leaves $400 toward the $599 package. A $750 business assessment leaves $1,750 toward an initial $2,500 engagement.
How quickly can someone help?
Availability and the expected start time are confirmed during intake. Work is scheduled during staffed service hours. A response or callback time is separate from the time required to resolve an incident.
What should I share when I contact you?
Tell us whether this is a personal or business incident, what happened, when it happened, which accounts or devices are affected, and whether money or business operations are affected. Provide a safe callback number. Do not submit passwords, MFA codes, recovery keys, or sensitive evidence through the public contact form.
Can you work with our IT provider or insurer?
Yes, coordination can be included in the agreed business engagement. Let us know about your IT provider, cyber insurance, or counsel during intake so responsibilities and any engagement requirements can be clarified.
Can you help prevent this from happening again?
After the incident is stabilized, we can discuss separately priced identity protection, endpoint monitoring, and security awareness training. Ongoing protection is optional; future incident labor is defined in that service agreement.
LET'S TAKE THE NEXT STEP
You don't have to
figure this out alone.
Start with a free 10-minute fit check. We will confirm the right assessment, the scope, and availability.
Request incident help
Use our existing contact page and mention Incident Assist. Include a safe callback number and a brief description of what happened.
Contact Red GarrisonDo not send passwords, MFA codes, or recovery keys. Submitting a request does not start an engagement or guarantee an immediate response.
AFTER RECOVERY
Keep your defenses working.
Explore ongoing identity protection, endpoint monitoring, and security awareness training.