Skip to main content
Home / Services / Incident Response Retainer

Incident Response Retainer

On-call DFIR team with a 1-hour response SLA

Incident Response Retainer ASSESSMENT
2
CRITICAL
6
HIGH
11
MEDIUM
5
LOW
External perimeter testingPASSED
Application security testingPASSED
Remediation verificationIN PROGRESS
Final report deliveryPENDING
Overview

What This Engagement Covers

A comprehensive assessment tailored to your environment.

When something goes wrong, you do not want to be shopping for an IR firm. Our retainer gets you a pre-contracted, pre-onboarded DFIR team with a 1-hour response SLA, 24/7/365.

Our Process

What We Test & How

What We Test

Full DFIR scope — ransomware, BEC, insider threats, cloud intrusions, supply chain compromise, nation-state activity. Containment, eradication, forensic analysis, and recovery.

Our Approach

Pre-engagement onboarding so we know your environment before the crisis. On-call DFIR leads, coordinated communications support, and hands-on containment authorized to our agreed scope.

Deliverables

What You'll Receive

Everything included in your engagement report.

Pre-negotiated MSA and statement of work

1-hour response SLA, 24/7/365

Dedicated DFIR lead on retainer

Quarterly tabletop exercise

Annual IR plan review

Post-incident report and root cause analysis

Executive and board-level communications support

Methodology

Our Testing Methodology

A structured approach to identifying and validating vulnerabilities.

1

Onboarding and environment discovery

2

Communications and escalation planning

3

Immediate containment on activation

4

Forensic collection and analysis

5

Eradication and recovery

6

Post-incident retrospective

Findings

Common Vulnerabilities We Find

Typical security issues discovered during this type of engagement.

Ransomware detonation and spread Business email compromise Credential-based lateral movement Data exfiltration via cloud storage Persistence mechanisms in cloud tenants Insider threat activity
Who It's For

Ideal For

Organizations without an internal DFIR team
Companies with cyber insurance requirements
Regulated industries (finance, healthcare)
Any business where downtime has real cost
Compliance

Standards We Support

SOC 2 HIPAA PCI-DSS NIST CSF GDPR NIS2

Ready to Get Started?

$18,000/year retainer

Typical engagement: Annual retainer + incident-based engagement

Why Us

Why Lorikeet Security

Certified Experts

OSCP, OSCE, CEH, GPEN certified professionals

Auditor Ready

Reports designed for compliance audits

Free Retesting

Validate fixes at no additional cost

Expert Support

Direct access to testing team during remediation

Lory waving

Hi, I'm Lory! Need help finding the right service? Click to chat!