SOC staffed · Kiel · UTC

EN / DE Status: operational
KeelSECURITY
Call now +49 431 555 0000 Book a consultation Book

KEEL RESPONSE · 24/7/365

Under attack?
We're on it.

Call the hotline. An incident responder answers.

+49 431 555 0000

Median time to answer: 38 seconds (Q2 2026, illustrative). German and English.

Tap to call

Can't talk freely? We call you back within 15 minutes.

That's all we need. We'll ask the rest on the phone. Your number is used for this call only.

DO THIS NOW

Four things, in this order.

  1. 1

    Disconnect, don't power off.

    Unplug affected systems from the network or disable Wi-Fi. Leave them running: memory holds evidence.

  2. 2

    Preserve logs.

    Don't delete, reimage or "clean up" yet. Note what you saw and when, in UTC if you can.

  3. 3

    Don't pay, don't negotiate.

    Not before speaking to experts. Don't contact the attackers.

  4. 4

    Call us from a clean phone.

    Assume email and chat may be read.

    +49 431 555 0000

Example copy · to be validated by the provider's IR team.

THE FIRST HOUR

What happens after you call.

No queue, no ticket number. The person who answers stays with you until a lead responder has taken over.

  1. T+00:00

    A responder answers and takes the first facts: what, where, since when.

  2. T+00:10

    Immediate containment steps, guided live on the phone.

  3. T+00:20

    A named lead responder takes over. Remote access and EDR deployment start.

  4. T+00:45

    Scope assessment and a plan in writing, via a secure channel.

  5. T+01:00

    Decision on on-site deployment. Reporting deadlines are tracked from here.

REPORTING DEADLINES

We track the clocks you're on.

We prepare the notifications with you and your legal counsel. Deadlines below are placeholders to verify for your jurisdiction.

OBLIGATION DEADLINE TO
NIS2 early warning T+24:00 National CSIRT / authority
NIS2 incident notification T+72:00 National CSIRT / authority
GDPR personal data breach T+72:00 Data protection authority
NIS2 final report 1 month National CSIRT / authority

SECURE CHANNEL

If your email may be compromised.

Write to us encrypted from an unaffected device. For anything urgent, call first.

Incident contactOpenPGP
Email
incident@example.com
Key ID
0x7F19D2E83B5591AC
Fingerprint
4A1F 9C0E 22B7 51D3 8E6A 0C4B 7F19 D2E8 3B55 91AC
Signal
on request, via hotline
Download public key (.asc) →

NOT AN EMERGENCY?

Next time, be prepared.

An IR retainer guarantees response times, pre-agreed rates and an onboarded team that already knows your network. Unused hours convert into assessments.

Request a retainer
Remote response
≤ T+00:15
On site (DACH)
≤ T+08:00
Retainer from
€ 9,600 / year
Accepted by insurers
Yes

Illustrative terms

WARD Kit · D03