What it is
Immediate takeover for production incidents, data leaks or blocking regressions. Free 30-minute qualification call.
For whom
Executives, IT directors and SaaS editors in crisis (site down, ransomware, botched migration, blocking regression) needing a senior right now.
Indicative price
Daily billing, +50% surcharge outside business hours. GDPR/CNIL notification if a leak is confirmed. Written post-mortem included.
These are the situations we get called on urgently, with a horizon of a few hours to a few days.
- 1
Detected data leak. You must contain, map what left, prepare notification to the supervisory authority within 72 h, communicate to affected users and clients.
- 2
Ransomware in progress or confirmed. You need a third party to arbitrate calmly: pay, restore from backups, communicate, file a report. Cold-blooded review of options.
- 3
Website or application in critical outage. You are losing revenue live, your team cannot find the cause. Express diagnostic, immediate workaround, lasting fix.
- 4
Tech vendor no longer responding. They stopped taking calls, production runs but you can no longer change or fix anything. Reclaim of infrastructure and code.
- 5
Developer leaving the team tomorrow. You must audit what they know, what is documented or not, run an accelerated knowledge transfer and secure access before they leave.
- 6
Loss of the only tech contact. A founder, a technical director, a long-time freelance is no longer reachable. You must analyze the existing, take back the keys, restart the team.
- 7
Urgent hosting migration. Provider shutdown, cost explosion, arbitration made, compliance imposed — the switchover must happen in the coming weeks. Scoping and steering.
- 8
Anti-fraud alert raised by your payment provider. You must qualify, contain, prove remediation to the acquirer. Analysis and response file.
- 9
Express audit before Monday's board or committee. A tech topic must be defended or challenged calmly. Analysis note and argument within 48 to 72 hours.
- 10
Cybercrime legal assistance. Filing a complaint, notifying the supervisory authority, coordinating with ANSSI or Cybermalveillance. Support in building the technical file.
Intervention method
A stable sequence, adapted to the urgency level.
Qualification call (30 min, free)
You describe the situation. We qualify urgency, identify the actors to mobilize, estimate scope and duration. No commitment at this stage.
Express diagnostic
Within the first hours of intervention: root cause, residual exposure, urgent decisions to take, options still open. Written communication to leadership.
Written action plan
Actions ranked by priority, each with an owner, a deadline and a success criterion. The plan aligns all stakeholders immediately.
Guided execution
Depending on your need: we execute directly, we steer your team, we coordinate external actors (lawyer, authority, host, bank).
Debrief
Formalized post-mortem at closure: what happened, what was done, what remains, recommendations to prevent recurrence. Usable internally and externally.
30-day follow-up
Written support included after closure for questions that surface as remediation is implemented.
Transparent rates from qualification. Express quote signed before start.
Standard day
Billed per senior person-day during business hours. Typically 1 to 3 days depending on scope. Quote signed before start.
Off-hours
Night, weekend or holiday work: indicative 50% surcharge on the standard day. Set in the express quote from qualification.
Fixed scope
The express quote sets an engagement cap. Any extension requires a written addendum — no drift without validation.
What we don't do
We are not a Security Operations Center, nor a 24/7 on-call team. Our role is one-off: take back control, scope, execute the most urgent, hand over.
Frequent questions
How do we start?+
You reach us by phone, email or form. We call back during business hours for a free 30-minute qualification call. If intervention is decided, express quote signed within 24 h, start within 24 to 72 business hours.
Indicative rates?+
Standard senior day: €1,200 to €1,800 excl. VAT depending on complexity and urgency. Indicative 50% surcharge outside business hours. Typical 1 to 3 days. Express quote specified before start, contractual engagement cap.
Do you intervene remotely or on-site?+
Most interventions are remote with read then write access based on need. An on-site visit can be organized within 48 h for an immersion, a crisis room or communication to a board.
Are you available tonight?+
We are not a 24/7 on-call team. Business hours only by default. Off-hours intervention is possible with surcharge, provided it is qualified in advance — we do not take cold inbound calls at 3 AM.
Do you coordinate with lawyer, bank, authority?+
Yes, frequently during crises. We take the technical link with third parties (criminal or digital-law lawyer, DPO, host, payment provider, ANSSI, Cybermalveillance, supervisory authority) so your leadership can focus on decisions.
/ En résumé
A critical situation in progress?
Free 30-minute qualification call. We call back during business hours.
Continue with
Pages that pair well with this one
Adjacent topics covered by MAG&Cie, hand-curated to stay on your problem.