Available 24/7

If you are dealing with a cyber attack right now,
call this number.

Available 24 hours a day, every day of the year.
You do not need to be an existing client to call.

Assured Service Provider in association with National Cyber Security Centre — Cyber Incident Response: Standard Level

NCSC Assured Cyber Incident Response

Aruga is an NCSC Assured Service Provider for Cyber Incident Response at Standard Level, giving organisations confidence that our incident response service meets the NCSC's recognised standards for quality and capability.

What happens when you call

Here is exactly what to expect.

We know that calling a number you have never used before, in the middle of a crisis, takes a moment of courage. Here is what happens from the moment you dial, so you know exactly what you are walking into.

An automated menu directs you to the right team

When you call, a short automated menu will help route you to the right part of the Aruga team. It is brief and straightforward. Follow the options and you will be connected to a specialist who can help.

We listen and triage

We will ask you some straightforward questions to understand what has happened and how serious it is. You do not need to be a technical expert. Just tell us what you know and we will take it from there. There is no wrong way to describe what you are seeing.

A specialist gets to work

Once we understand the situation, a cyber security specialist will begin working on your case. We will talk you through what we are doing and what your options are as things develop. You will not be left to figure things out alone.

We stay with you until it is under control

We will stay with you through the response. Our goal is to help you contain the incident, understand what happened, and get your business back on its feet. We will tell you honestly what we can do and what comes next.

Who can call

This line is open to everyone.

You do not need to be an existing Aruga client.
You do not need a retainer or subscription in place.
You do not need to be certain it is a real attack. If something feels wrong, call.
You do not need to be technical. Just describe what you are seeing.

We will assess the situation together and work out the best way to help. If the right answer is a different service or a different provider, we will tell you that honestly.

Before you call

Useful things to have to hand.

You do not need all of this. But if you can gather any of it quickly while someone else dials, it will help us move faster.

A brief description of what you are seeing - error messages, unusual behaviour, ransom notes
When you first noticed something was wrong
Which systems or devices appear to be affected
Your name, company name, and a contact number we can call back on
Whether you have already taken any steps - disconnecting devices, shutting systems down

Looking for ongoing protection?

If you are not in an active incident, there is a better starting point.

The emergency line is here for businesses that need help right now. If you are thinking about what happens if an incident occurs, and want a service with agreed response times and a plan in place before anything happens, these are the services to look at.

Up to 150 employees

Incident Response Assurance

A fixed annual subscription that gives your business 24/7 access to the Aruga Incident Response team, a specialist callback within 60 minutes of any call, and expert-guided containment, however many times you need it. Pre-agreed, no surprises.

View Incident Response Assurance

151+ employees

Incident Response Retainer

A bespoke retainer with prepaid response hours, a named lead responder who knows your environment before anything happens, and a pre-agreed SLA. Built for larger organisations that need a committed, dedicated response capability.

View Incident Response Retainer

In an incident right now? Call us.

03333 05 07 06

Call now, 03333 05 07 06

If you are dealing with a cyber attack right now, call this number.