StonePath Cyber · Incident Response
Incident Response Retainer
A senior incident response advisor on retainer — so when something goes wrong, you already know who to call and what happens next.
$1,500/month
Billed monthly · Cancel ahead of your next billing date · Secure checkout by Stripe · We email you after checkout to schedule onboarding
What it is
A monthly retainer that gives your organization a named senior advisor for incident readiness and response coordination. Outside of incidents, the retainer keeps your response plan, contacts and playbooks current. When a suspected incident happens, your advisor helps you triage, coordinate the response, preserve evidence and make communication decisions. Response terms and scope are agreed in writing during onboarding.
What’s included
- Named senior advisor — one point of contact who knows your environment
- Onboarding & readiness review — your systems, contacts, plan and escalation paths documented up front
- Incident triage & coordination — guidance and coordination when a suspected incident occurs, within the agreed scope
- Evidence & communication guidance — what to preserve, who to notify and how
- Plan upkeep — contacts, playbooks and escalation paths kept current
- Quarterly readiness check-in — a standing review of changes and open risks
Who it’s for
Organizations that want a defined, senior-led path for handling a security incident without building an in-house incident response function.
Senior-led, embedded
Every StonePath Cyber engagement is led by a named senior advisor who works alongside your team from kickoff to handoff — one accountable point of contact, plain-language findings, and recommendations sized for your organization.
How it works
Start the monthly retainer through Stripe.
Document systems, contacts, escalation paths and response terms.
Plan upkeep and quarterly check-ins with your advisor.
Contact your advisor to start triage and coordination.
Questions
What exactly is covered during an incident?
Coverage, response terms and any limits are agreed in writing during onboarding, so there is no ambiguity when you need help.
Is forensic investigation included?
Triage and coordination are included. Deeper investigation work is scoped separately if an incident requires it.
Can we cancel?
Yes. The retainer is billed monthly and can be cancelled ahead of your next billing date.
Does this replace cyber insurance?
No. It complements insurance. If your insurer requires specific providers, tell us at onboarding so the retainer works alongside that requirement.
Do we need an incident response plan already?
No. Onboarding documents your current state, and the Incident Response Plan Build can be added if you need a full plan.
Incident Response Retainer
A senior incident response advisor on retainer — so when something goes wrong, you already know who to call and what happens next.
$1,500/month
Service descriptions reflect general industry practice. Nothing on this page is a compliance determination, a certification, a license, or a guarantee of any outcome. Final scope is confirmed with you in writing before work begins.