500+ customers place their trust in us – from startups to large companies
Fast and professional help with IT security incidents
Evil never sleeps - and neither do we.
Every second counts in cyber attacks. Only an immediate and professional cyber security incident response can minimize the damage and prevent a catastrophe.
With our Service Level Agreement 'Professional', we are there for you 24/7. Whether in the event of suspicious activity or an acute cyber attack. We immediately carry out an initial assessment and initiate the first countermeasures together with you (first response).

Incident Response Retainer at a glance
No framework agreement
Contact via hotline or e-mail
------------------------------------------------------
Help for new customers
Contact HvS via the hotline or e-mail during business hours | |
Acceptance of the incident if capacity is available | |
Contract negotiations |
SLA Basic
Framework agreement with basic services
------------------------------------------------------
Contractual services
Availability during business hours (08:00 to 18:00 CET, during summer time CEST) | |
Guaranteed response within 2 hours during business hours | |
No ongoing costs | |
Simple alerting via our IR portal | |
Prioritized treatment towards new customers |
SLA Professional
Availability 24 around the clock
------------------------------------------------------
Contractual services in addition to SLA Basic
Guaranteed availability and first response (by IR experts) during and outside business hours, 365 days a year | |
Simple alerting of our 24/7 on-call service via our IR portal | |
Performance commitment for best practice forensics packages | |
Prioritized treatment for all other services | |
5% discount on standard hourly rates and best practice packages |
We are already working on our SLA Premium framework agreement with additional services. Let us know if you would like to find out more!
Good reasons for an incident response retainer
Not sure what an incident response retainer actually benefits you?
From our perspective – and that of our existing framework agreement customers – a lot, because every second counts in an emergency
Fast APT response
You save yourself the long search for IR service providers. With us, you have a BSI-qualified APT responder on your side.
No need to request quotes
In an emergency, you save yourself the trouble of requesting, checking and signing quotations and the time lost in the process.
Clear responsibilities
The responsibilities and processes (e.g. alerting, cooperation, etc.) are already clarified before the incident and guarantee a smooth process.
No loss of time
In the event of an incident, our team of experts can get straight to work and help with damage control / containment.
Immediate alerting
Simple alerting of our on-call service via the IR portal and our emergency business cards. This allows customers to alert us at any time with just a few clicks. See “Our Incident Response Retainer options at a glance”
Flexible billing
With a framework agreement, you benefit from flexible billing based on time and material.
Want to be able to react professionally in an emergency?
Let's get to know each other in a web meeting and talk about possible approaches.
The path to an IR retainer
Not every path has to be rocky and the path to your IR retainer at HvS is definitely not. We can provide you with a contract and onboard you to our service within just a few days.
Contact us
Please use the form below to register your interest. An Incident Responder will then contact you immediately to arrange a meeting.
Get to know us & contract draft
After a brief introduction and an explanation of our services, we will send you a draft contract.
Signing the contract
Once the contract has been successfully signed, the next step is to start onboarding.
Onboarding
Onboarding includes the following topics.
- Getting to know your IT infrastructure and security landscape
- Explanation of the security incident management process
- Clarification of responsibilities in the event of an emergency
- Live demonstration of our IR portal and the alerting of the on-call service
- Further contact options
After the onboarding, you will know how best to reach our IR experts. We will also have got to know your contacts and gained an overview of your IT infrastructure.
Access to our IR portal
Our Emergency Access Cards give you quick and easy access to our IR portal. You can use the portal to trigger our 24/7 on-call service around the clock, receive an up-to-date response status for ongoing incidents and also have access to our HvS Knowledge Base. Here you will find rules of conduct in an emergency and how-to guides for typical tasks during an incident.