Digital Forensics / Incident Response / Cyber Readiness
Digital forensics for lawyers and organizational investigations. Urgent incident response for organizations under attack. Annual preparedness and response with BreachReady.
Digital forensics for legal matters and workplace investigations. Urgent incident response when your business is under attack. BreachReady to prepare your organization before a crisis strikes.
LEGAL CASES & WORKPLACE INVESTIGATIONS
Preserve, examine and explain digital evidence. For lawyers who need digital evidence for a legal case, and organizations investigating employee data theft or HR concerns.
FOR ORGANIZATIONS FACING AN INCIDENT
Facing ransomware, business email compromise or suspected data theft? Get specialist help to understand what happened and coordinate the next response decisions.
FOR ORGANIZATIONS INVESTING AHEAD
A cyberattack can stop your business. Confusion can keep it stopped. DFI does the heavy lifting on annual readiness: preparing your plan, rehearsing decisions and guiding improvements, so your team can stay focused on the business.
Systems are down. Customers are waiting. Decisions cannot wait. BreachReady brings experienced DFI responders and forensic specialists into your preparations, so your team has a practiced way to act.
DFI builds the plan, facilitates the rehearsal and guides improvements through an expert-led annual preparedness and response program. Your team contributes business context and key decisions, with technical responsibilities agreed in scope.
Identify important gaps in your response.
DFI builds the plan, connects the people and rehearses decisions.
Put usable plans, agreed specialist support and a practiced team in place.
30–60-day initial target*Maintain readiness through testing, prioritized improvements, reporting and review.
* The initial target depends on agreed scope, access to information, participation and scheduling. Further testing and improvement continue through the annual program. Readiness levels describe progress, not certifications or guarantees against incidents. Service tiers set response capacity and testing scope.
PRIORITIZED AND IMPLEMENTED AT EVERY LEVEL
Every service level implements the fundamental components that build and maintain cyber resilience and support rapid recovery. Each level is tailored to the unique needs of your organization, with response-hour allocations and penetration-testing scope scaled to provide the right fit.
THE RIGHT CAPACITY FOR YOUR ORGANIZATION
All levels include the core preparedness program. Your organization’s complexity, required service hours and penetration-testing scope determine the right fit.
THE CORE PROGRAM
For smaller organizations with simpler networks, fewer people, endpoints and locations.
THE SAME CORE PROGRAM
For growing or mid-sized organizations with more complex networks, more endpoints or multiple locations.
THE SAME CORE PROGRAM
For larger organizations with substantial response needs and greater business-interruption or reputational exposure.
Essential Readiness starts at just CAD $999/month**
** Monthly equivalent. CAD $11,988 billed annually, payable in advance. Applicable taxes and final scope confirmed in your quote.
DIGITAL FORENSICS
Find the service that fits the records and issues in your matter.
Digital Forensics
Examine computer and storage records around the questions that matter in your dispute, investigation or incident.
ExploreDigital Forensics
Collect and examine available messages, media and application records from a phone or tablet, with specialist access assessment for locked devices when a passcode is lost, forgotten or unknown.
ExploreDigital Forensics
Preserve and examine relevant mailbox, attachment and cloud activity records from authorized accounts.
ExploreDigital Forensics
Examine digital evidence relevant to suspected movement or misuse of business information before or after an employee departure.
ExploreDigital Forensics
Support a focused review through collection, processing, search and organized production under agreed instructions.
ExploreDigital Forensics
Present the examination, evidence and opinions in a form that supports informed legal and organizational decisions.
ExploreWHO WE SERVE
Legal, business, IT and public-sector perspectives on the same evidence-led work.
Who We Serve
Digital forensics that helps counsel ask focused questions, preserve relevant sources and understand supportable findings.
ExploreWho We Serve
Evidence-led support for workplace concerns, suspected information misuse and business-critical cyber incidents.
ExploreWho We Serve
Add forensic investigation and incident-readiness expertise without losing the system knowledge and relationships your team brings.
ExploreWho We Serve
Readiness planning and specialist incident support for municipal leadership and IT teams.
ExploreWho We Serve
Bring district leadership, IT and key advisers together around a practical cyber incident response.
ExploreWho We Serve
Connect central and distributed teams around research, learning and campus-service response decisions.
ExploreWho We Serve
Forensic investigation, scoped reporting and coordinated support for the people advising an organization through an incident.
ExploreWho We Serve
Discuss whether a device or account examination is appropriate for your matter and what authority or access is required.
ExploreWHY DFI FORENSICS
Independent examination and practical reporting, shaped around the questions that matter.
Meet DFI ForensicsDefine the scope before choosing a tool.
Test explanations and document the limits.
Give counsel and organizations a clearer basis for decisions.
“[A]ttentive, responsive, fair, calm”
FROM THE BLOG
Practical perspectives on digital evidence, investigations and readiness.
Article
A practical approach to testing disputed message exhibits against lawfully available source records, with clear limits when devices or accounts are unavailable.
Read article
Article
How to scope and preserve mobile conversations across SMS, MMS, iMessage, WhatsApp, WeChat, Telegram, and Signal without assuming every device or backup is recoverable.
Read article
Article
A preservation-first guide to coordinating offboarding, lawful collection, cloud logs, and device evidence while keeping allegations separate from verified facts.
Read articleYOUR NEXT STEP
Tell us what you need to understand.
