Forensic acquisition, analysis, reporting and testimony — one team, one evidence chain, one defensible conclusion.
Bit-for-bit acquisition of phones, laptops, servers, tablets and removable media. We handle encrypted, damaged, water-damaged and wiped devices, and we recover deleted artefacts where the media allows.
Preserve, cull and review large document sets. We work proportionately, defensibly and to the timetable — with a clear audit trail from collection to production.
Open-source and digital footprint analysis of complex subjects — people, entities, networks and jurisdictions. We turn scattered public data into a structured, evidence-linked picture.
Contain, investigate and recover. Rapid triage for ransomware, insider threat, business email compromise and data breach — with forensic preservation built in from the first hour.
CPR Part 35, criminal and regulatory reports. Clear, independent and ready to be tested in court — including joint statements, expert meetings and oral testimony.
Chain-of-custody, write-blocking, hashing and secure storage. Every step is documented and reproducible — so the finding survives scrutiny.
Choose the level of involvement that fits the matter. Every engagement starts with a written scope and a clear authority.
A named forensic team on standby for the year. Pre-agreed scope, rates and SLAs, so you can act on the first hour.
Best for ongoing exposureA single case, scoped end to end. We agree the questions, the evidence, the timetable and the report format.
Most commonIndependent expert review of an existing forensic report, or a second opinion on a contested conclusion.
Review & second opinionTell us the question and the evidence. We will tell you what is needed — and what is not.