Resource Center
Straight answers, before you need them.
Not a blog. A working reference for the questions that decide whether you're ready: what to do in the first hours of an attack, whether your backups would actually save you, whether NIS2 applies to you, and what must be reported when.
Ransomware response
Active ransomware incident? Contain the affected systems and get expert help. Emergency response →
Hit by Ransomware? The First Hours, Step by Step →
“We just found ransomware. What do we do right now — and what must we not touch?”
Isolate the affected systems, protect recovery options, preserve the evidence, start the reporting clocks — and the mistakes made in the first hour that cost weeks later.
8 min read · Updated July 2026
Ransomware responseShould You Pay the Ransom? A Decision Framework →
“The attackers want money. Do we pay or not?”
What payment actually buys (and does not), the legal and sanctions dimension, the facts to establish before deciding — and why the real answer is set before the attack.
8 min read · Updated July 2026
Interviews & analysis
The ANCPI Ransomware Attack: A Technical Breakdown →
“How did one unpatched server take down a national agency — and would it work on us?”
A defender’s reading of the DNSC technical report: the six-stage attack chain, the control that would have broken it at each step, and why the 86-hour detection gap is the number that matters.
12 min read · Updated August 2026
Interviews & analysisInside the Mind of ByteToBreach: Money, Faith and the ANCPI Cyberattack →
“What does the attacker behind the ANCPI claims actually say — and what can be verified?”
The threat actor claiming responsibility for the ANCPI incident discusses motivation, target selection, operational limits and what he says happened inside the Romanian institution.
8 min read · Updated July 2026
NIS2 & compliance
Does NIS2 Apply to My Company? →
“Am I in scope — and am I "essential" or "important"?”
The listed activities, the SME size test done properly, the categories covered regardless of size, and the difference between legal scope and supply-chain contractual pressure.
8 min read · Updated July 2026
NIS2 & complianceNIS2 Incident Reporting: The 24-Hour and 72-Hour Process Explained →
“What must I report after an incident, to whom, and how fast?”
What counts as a significant incident, when each clock starts, what goes into the early warning, the 72-hour notification and the final report.
7 min read · Updated July 2026
NIS2 & complianceNIS2 vs ISO 27001: Where They Overlap and Where They Don’t →
“We are ISO 27001 certified. Are we covered for NIS2?”
ISO 27001 gets you most of the way to NIS2 — but not all of it, and the gaps are the parts regulators actually inspect. A control-by-control comparison.
8 min read · Updated August 2026
From reading to knowing
Articles explain. These three tell you where you stand.
StopRansomware Probe
A free, read-only exposure assessment for Windows. Enter your business email, run it, and get your Exposure Score in minutes.
Get StopRansomware Probe → Free assessmentSecurity Checkup
The full picture: our engineers analyze your network, endpoints and mobile — the report is yours to keep.
About the checkup → Free assessmentNIS2 Gap Assessment
A preliminary review of your likely NIS2 scope, current readiness and evidence gaps, with a prioritized roadmap.
About the assessment →